October 2019 - openSUSE Security Announce

[security-announce] openSUSE-SU-2019:2393-1: moderate: Security update for python
by opensuse-security＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Security Update: Security update for python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2393-1 Rating: moderate References: #1130840 #1149955 #1153238 Cross-References: CVE-2019-16056 CVE-2019-16935 CVE-2019-9947 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for python fixes the following issues: Security issues fixed: - CVE-2019-9947: Fixed an insufficient validation of URL paths with embedded whitespace or control characters that could allow HTTP header injections. (bsc#1130840) - CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955) - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2393=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpython2_7-1_0-2.7.14-lp151.10.10.2 libpython2_7-1_0-debuginfo-2.7.14-lp151.10.10.2 python-2.7.14-lp151.10.10.1 python-base-2.7.14-lp151.10.10.2 python-base-debuginfo-2.7.14-lp151.10.10.2 python-base-debugsource-2.7.14-lp151.10.10.2 python-curses-2.7.14-lp151.10.10.1 python-curses-debuginfo-2.7.14-lp151.10.10.1 python-debuginfo-2.7.14-lp151.10.10.1 python-debugsource-2.7.14-lp151.10.10.1 python-demo-2.7.14-lp151.10.10.1 python-devel-2.7.14-lp151.10.10.2 python-gdbm-2.7.14-lp151.10.10.1 python-gdbm-debuginfo-2.7.14-lp151.10.10.1 python-idle-2.7.14-lp151.10.10.1 python-tk-2.7.14-lp151.10.10.1 python-tk-debuginfo-2.7.14-lp151.10.10.1 python-xml-2.7.14-lp151.10.10.2 python-xml-debuginfo-2.7.14-lp151.10.10.2 - openSUSE Leap 15.1 (x86_64): libpython2_7-1_0-32bit-2.7.14-lp151.10.10.2 libpython2_7-1_0-32bit-debuginfo-2.7.14-lp151.10.10.2 python-32bit-2.7.14-lp151.10.10.1 python-32bit-debuginfo-2.7.14-lp151.10.10.1 python-base-32bit-2.7.14-lp151.10.10.2 python-base-32bit-debuginfo-2.7.14-lp151.10.10.2 - openSUSE Leap 15.1 (noarch): python-doc-2.7.14-lp151.10.10.1 python-doc-pdf-2.7.14-lp151.10.10.1 References: https://www.suse.com/security/cve/CVE-2019-16056.html https://www.suse.com/security/cve/CVE-2019-16935.html https://www.suse.com/security/cve/CVE-2019-9947.html https://bugzilla.suse.com/1130840 https://bugzilla.suse.com/1149955 https://bugzilla.suse.com/1153238 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2389-1: moderate: Security update for python
by opensuse-security＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Security Update: Security update for python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2389-1 Rating: moderate References: #1130840 #1149955 #1153238 Cross-References: CVE-2019-16056 CVE-2019-16935 CVE-2019-9947 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for python fixes the following issues: Security issues fixed: - CVE-2019-9947: Fixed an insufficient validation of URL paths with embedded whitespace or control characters that could allow HTTP header injections. (bsc#1130840) - CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955) - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2389=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): python-2.7.14-lp150.6.21.1 python-curses-2.7.14-lp150.6.21.1 python-curses-debuginfo-2.7.14-lp150.6.21.1 python-debuginfo-2.7.14-lp150.6.21.1 python-debugsource-2.7.14-lp150.6.21.1 python-demo-2.7.14-lp150.6.21.1 python-gdbm-2.7.14-lp150.6.21.1 python-gdbm-debuginfo-2.7.14-lp150.6.21.1 python-idle-2.7.14-lp150.6.21.1 python-tk-2.7.14-lp150.6.21.1 python-tk-debuginfo-2.7.14-lp150.6.21.1 - openSUSE Leap 15.0 (x86_64): python-32bit-2.7.14-lp150.6.21.1 python-32bit-debuginfo-2.7.14-lp150.6.21.1 References: https://www.suse.com/security/cve/CVE-2019-16056.html https://www.suse.com/security/cve/CVE-2019-16935.html https://www.suse.com/security/cve/CVE-2019-9947.html https://bugzilla.suse.com/1130840 https://bugzilla.suse.com/1149955 https://bugzilla.suse.com/1153238 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2388-1: moderate: Security update for openconnect
by opensuse-security＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Security Update: Security update for openconnect ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2388-1 Rating: moderate References: #1151178 Cross-References: CVE-2019-16239 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openconnect fixes the following issues: - CVE-2019-16239: Fixed a buffer overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes. (bsc#1151178) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2388=1 Package List: - openSUSE Leap 15.0 (x86_64): openconnect-7.08-lp150.5.3.1 openconnect-debuginfo-7.08-lp150.5.3.1 openconnect-debugsource-7.08-lp150.5.3.1 openconnect-devel-7.08-lp150.5.3.1 openconnect-doc-7.08-lp150.5.3.1 - openSUSE Leap 15.0 (noarch): openconnect-lang-7.08-lp150.5.3.1 References: https://www.suse.com/security/cve/CVE-2019-16239.html https://bugzilla.suse.com/1151178 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2385-1: moderate: Security update for openconnect
by opensuse-security＠opensuse.org 27 Oct '19

27 Oct '19

openSUSE Security Update: Security update for openconnect ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2385-1 Rating: moderate References: #1151178 Cross-References: CVE-2019-16239 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openconnect fixes the following issues: - CVE-2019-16239: Fixed a buffer overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes. (bsc#1151178) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2385=1 Package List: - openSUSE Leap 15.1 (noarch): openconnect-lang-7.08-lp151.6.3.1 - openSUSE Leap 15.1 (x86_64): openconnect-7.08-lp151.6.3.1 openconnect-debuginfo-7.08-lp151.6.3.1 openconnect-debugsource-7.08-lp151.6.3.1 openconnect-devel-7.08-lp151.6.3.1 openconnect-doc-7.08-lp151.6.3.1 References: https://www.suse.com/security/cve/CVE-2019-16239.html https://bugzilla.suse.com/1151178 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2379-1: important: Security update for procps
by opensuse-security＠opensuse.org 26 Oct '19

26 Oct '19

openSUSE Security Update: Security update for procps ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2379-1 Rating: important References: #1092100 #1121753 Cross-References: CVE-2018-1122 CVE-2018-1123 CVE-2018-1124 CVE-2018-1125 CVE-2018-1126 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for procps fixes the following issues: procps was updated to 3.3.15. (bsc#1092100) Following security issues were fixed: - CVE-2018-1122: Prevent local privilege escalation in top. If a user ran top with HOME unset in an attacker-controlled directory, the attacker could have achieved privilege escalation by exploiting one of several vulnerabilities in the config_file() function (bsc#1092100). - CVE-2018-1123: Prevent denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maped a guard page at the end of the overflowed buffer, ensuring that the impact of this flaw is limited to a crash (temporary denial of service) (bsc#1092100). - CVE-2018-1124: Prevent multiple integer overflows leading to a heap corruption in file2strvec function. This allowed a privilege escalation for a local attacker who can create entries in procfs by starting processes, which could result in crashes or arbitrary code execution in proc utilities run by other users (bsc#1092100). - CVE-2018-1125: Prevent stack buffer overflow in pgrep. This vulnerability was mitigated by FORTIFY limiting the impact to a crash (bsc#1092100). - CVE-2018-1126: Ensure correct integer size in proc/alloc.* to prevent truncation/integer overflow issues (bsc#1092100). Also this non-security issue was fixed: - Fix CPU summary showing old data. (bsc#1121753) The update to 3.3.15 contains the following fixes: * library: Increment to 8:0:1 No removals, no new functions Changes: slab and pid structures * library: Just check for SIGLOST and don't delete it * library: Fix integer overflow and LPE in file2strvec CVE-2018-1124 * library: Use size_t for alloc functions CVE-2018-1126 * library: Increase comm size to 64 * pgrep: Fix stack-based buffer overflow CVE-2018-1125 * pgrep: Remove >15 warning as comm can be longer * ps: Fix buffer overflow in output buffer, causing DOS CVE-2018-1123 * ps: Increase command name selection field to 64 * top: Don't use cwd for location of config CVE-2018-1122 * update translations * library: build on non-glibc systems * free: fix scaling on 32-bit systems * Revert "Support running with child namespaces" * library: Increment to 7:0:1 No changes, no removals New fuctions: numa_init, numa_max_node, numa_node_of_cpu, numa_uninit, xalloc_err_handler * doc: Document I idle state in ps.1 and top.1 * free: fix some of the SI multiples * kill: -l space between name parses correctly * library: dont use vm_min_free on non Linux * library: don't strip off wchan prefixes (ps & top) * pgrep: warn about 15+ char name only if -f not used * pgrep/pkill: only match in same namespace by default * pidof: specify separator between pids * pkill: Return 0 only if we can kill process * pmap: fix duplicate output line under '-x' option * ps: avoid eip/esp address truncations * ps: recognizes SCHED_DEADLINE as valid CPU scheduler * ps: display NUMA node under which a thread ran * ps: Add seconds display for cputime and time * ps: Add LUID field * sysctl: Permit empty string for value * sysctl: Don't segv when file not available * sysctl: Read and write large buffers * top: add config file support for XDG specification * top: eliminated minor libnuma memory leak * top: show fewer memory decimal places (configurable) * top: provide command line switch for memory scaling * top: provide command line switch for CPU States * top: provides more accurate cpu usage at startup * top: display NUMA node under which a thread ran * top: fix argument parsing quirk resulting in SEGV * top: delay interval accepts non-locale radix point * top: address a wishlist man page NLS suggestion * top: fix potential distortion in 'Mem' graph display * top: provide proper multi-byte string handling * top: startup defaults are fully customizable * watch: define HOST_NAME_MAX where not defined * vmstat: Fix alignment for disk partition format * watch: Support ANSI 39,49 reset sequences This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2379=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libprocps7-3.3.15-lp150.5.3.1 libprocps7-debuginfo-3.3.15-lp150.5.3.1 procps-3.3.15-lp150.5.3.1 procps-debuginfo-3.3.15-lp150.5.3.1 procps-debugsource-3.3.15-lp150.5.3.1 procps-devel-3.3.15-lp150.5.3.1 References: https://www.suse.com/security/cve/CVE-2018-1122.html https://www.suse.com/security/cve/CVE-2018-1123.html https://www.suse.com/security/cve/CVE-2018-1124.html https://www.suse.com/security/cve/CVE-2018-1125.html https://www.suse.com/security/cve/CVE-2018-1126.html https://bugzilla.suse.com/1092100 https://bugzilla.suse.com/1121753 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2376-1: important: Security update for procps
by opensuse-security＠opensuse.org 26 Oct '19

26 Oct '19

openSUSE Security Update: Security update for procps ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2376-1 Rating: important References: #1092100 #1121753 Cross-References: CVE-2018-1122 CVE-2018-1123 CVE-2018-1124 CVE-2018-1125 CVE-2018-1126 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for procps fixes the following issues: procps was updated to 3.3.15. (bsc#1092100) Following security issues were fixed: - CVE-2018-1122: Prevent local privilege escalation in top. If a user ran top with HOME unset in an attacker-controlled directory, the attacker could have achieved privilege escalation by exploiting one of several vulnerabilities in the config_file() function (bsc#1092100). - CVE-2018-1123: Prevent denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maped a guard page at the end of the overflowed buffer, ensuring that the impact of this flaw is limited to a crash (temporary denial of service) (bsc#1092100). - CVE-2018-1124: Prevent multiple integer overflows leading to a heap corruption in file2strvec function. This allowed a privilege escalation for a local attacker who can create entries in procfs by starting processes, which could result in crashes or arbitrary code execution in proc utilities run by other users (bsc#1092100). - CVE-2018-1125: Prevent stack buffer overflow in pgrep. This vulnerability was mitigated by FORTIFY limiting the impact to a crash (bsc#1092100). - CVE-2018-1126: Ensure correct integer size in proc/alloc.* to prevent truncation/integer overflow issues (bsc#1092100). Also this non-security issue was fixed: - Fix CPU summary showing old data. (bsc#1121753) The update to 3.3.15 contains the following fixes: * library: Increment to 8:0:1 No removals, no new functions Changes: slab and pid structures * library: Just check for SIGLOST and don't delete it * library: Fix integer overflow and LPE in file2strvec CVE-2018-1124 * library: Use size_t for alloc functions CVE-2018-1126 * library: Increase comm size to 64 * pgrep: Fix stack-based buffer overflow CVE-2018-1125 * pgrep: Remove >15 warning as comm can be longer * ps: Fix buffer overflow in output buffer, causing DOS CVE-2018-1123 * ps: Increase command name selection field to 64 * top: Don't use cwd for location of config CVE-2018-1122 * update translations * library: build on non-glibc systems * free: fix scaling on 32-bit systems * Revert "Support running with child namespaces" * library: Increment to 7:0:1 No changes, no removals New fuctions: numa_init, numa_max_node, numa_node_of_cpu, numa_uninit, xalloc_err_handler * doc: Document I idle state in ps.1 and top.1 * free: fix some of the SI multiples * kill: -l space between name parses correctly * library: dont use vm_min_free on non Linux * library: don't strip off wchan prefixes (ps & top) * pgrep: warn about 15+ char name only if -f not used * pgrep/pkill: only match in same namespace by default * pidof: specify separator between pids * pkill: Return 0 only if we can kill process * pmap: fix duplicate output line under '-x' option * ps: avoid eip/esp address truncations * ps: recognizes SCHED_DEADLINE as valid CPU scheduler * ps: display NUMA node under which a thread ran * ps: Add seconds display for cputime and time * ps: Add LUID field * sysctl: Permit empty string for value * sysctl: Don't segv when file not available * sysctl: Read and write large buffers * top: add config file support for XDG specification * top: eliminated minor libnuma memory leak * top: show fewer memory decimal places (configurable) * top: provide command line switch for memory scaling * top: provide command line switch for CPU States * top: provides more accurate cpu usage at startup * top: display NUMA node under which a thread ran * top: fix argument parsing quirk resulting in SEGV * top: delay interval accepts non-locale radix point * top: address a wishlist man page NLS suggestion * top: fix potential distortion in 'Mem' graph display * top: provide proper multi-byte string handling * top: startup defaults are fully customizable * watch: define HOST_NAME_MAX where not defined * vmstat: Fix alignment for disk partition format * watch: Support ANSI 39,49 reset sequences This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2376=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libprocps7-3.3.15-lp151.6.3.1 libprocps7-debuginfo-3.3.15-lp151.6.3.1 procps-3.3.15-lp151.6.3.1 procps-debuginfo-3.3.15-lp151.6.3.1 procps-debugsource-3.3.15-lp151.6.3.1 procps-devel-3.3.15-lp151.6.3.1 References: https://www.suse.com/security/cve/CVE-2018-1122.html https://www.suse.com/security/cve/CVE-2018-1123.html https://www.suse.com/security/cve/CVE-2018-1124.html https://www.suse.com/security/cve/CVE-2018-1125.html https://www.suse.com/security/cve/CVE-2018-1126.html https://bugzilla.suse.com/1092100 https://bugzilla.suse.com/1121753 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2365-1: moderate: Security update for gcc7
by opensuse-security＠opensuse.org 22 Oct '19

22 Oct '19

openSUSE Security Update: Security update for gcc7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2365-1 Rating: moderate References: #1071995 #1141897 #1142649 #1148517 #1149145 Cross-References: CVE-2019-14250 CVE-2019-15847 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has three fixes is now available. Description: This update for gcc7 to r275405 fixes the following issues: Security issues fixed: - CVE-2019-14250: Fixed an integer overflow in binutils (bsc#1142649). - CVE-2019-15847: Fixed an optimization in the POWER9 backend of gcc that could reduce the entropy of the random number generator (bsc#1149145). Non-security issue fixed: - Move Live Patching technology stack from kGraft to upstream klp (bsc#1071995, fate#323487). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2365=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): cpp7-7.4.1+r275405-lp150.12.1 cpp7-debuginfo-7.4.1+r275405-lp150.12.1 gcc7-7.4.1+r275405-lp150.12.1 gcc7-ada-7.4.1+r275405-lp150.12.1 gcc7-ada-debuginfo-7.4.1+r275405-lp150.12.1 gcc7-c++-7.4.1+r275405-lp150.12.1 gcc7-c++-debuginfo-7.4.1+r275405-lp150.12.1 gcc7-debuginfo-7.4.1+r275405-lp150.12.1 gcc7-debugsource-7.4.1+r275405-lp150.12.1 gcc7-fortran-7.4.1+r275405-lp150.12.1 gcc7-fortran-debuginfo-7.4.1+r275405-lp150.12.1 gcc7-go-7.4.1+r275405-lp150.12.1 gcc7-go-debuginfo-7.4.1+r275405-lp150.12.1 gcc7-locale-7.4.1+r275405-lp150.12.1 gcc7-obj-c++-7.4.1+r275405-lp150.12.1 gcc7-obj-c++-debuginfo-7.4.1+r275405-lp150.12.1 gcc7-objc-7.4.1+r275405-lp150.12.1 gcc7-objc-debuginfo-7.4.1+r275405-lp150.12.1 libada7-7.4.1+r275405-lp150.12.1 libada7-debuginfo-7.4.1+r275405-lp150.12.1 libasan4-7.4.1+r275405-lp150.12.1 libasan4-debuginfo-7.4.1+r275405-lp150.12.1 libcilkrts5-7.4.1+r275405-lp150.12.1 libcilkrts5-debuginfo-7.4.1+r275405-lp150.12.1 libgfortran4-7.4.1+r275405-lp150.12.1 libgfortran4-debuginfo-7.4.1+r275405-lp150.12.1 libgo11-7.4.1+r275405-lp150.12.1 libgo11-debuginfo-7.4.1+r275405-lp150.12.1 libobjc4-7.4.1+r275405-lp150.12.1 libobjc4-debuginfo-7.4.1+r275405-lp150.12.1 libstdc++6-devel-gcc7-7.4.1+r275405-lp150.12.1 libubsan0-7.4.1+r275405-lp150.12.1 libubsan0-debuginfo-7.4.1+r275405-lp150.12.1 - openSUSE Leap 15.0 (x86_64): gcc7-32bit-7.4.1+r275405-lp150.12.1 gcc7-ada-32bit-7.4.1+r275405-lp150.12.1 gcc7-c++-32bit-7.4.1+r275405-lp150.12.1 gcc7-fortran-32bit-7.4.1+r275405-lp150.12.1 gcc7-go-32bit-7.4.1+r275405-lp150.12.1 gcc7-obj-c++-32bit-7.4.1+r275405-lp150.12.1 gcc7-objc-32bit-7.4.1+r275405-lp150.12.1 libada7-32bit-7.4.1+r275405-lp150.12.1 libada7-32bit-debuginfo-7.4.1+r275405-lp150.12.1 libasan4-32bit-7.4.1+r275405-lp150.12.1 libasan4-32bit-debuginfo-7.4.1+r275405-lp150.12.1 libcilkrts5-32bit-7.4.1+r275405-lp150.12.1 libcilkrts5-32bit-debuginfo-7.4.1+r275405-lp150.12.1 libgfortran4-32bit-7.4.1+r275405-lp150.12.1 libgfortran4-32bit-debuginfo-7.4.1+r275405-lp150.12.1 libgo11-32bit-7.4.1+r275405-lp150.12.1 libgo11-32bit-debuginfo-7.4.1+r275405-lp150.12.1 libobjc4-32bit-7.4.1+r275405-lp150.12.1 libobjc4-32bit-debuginfo-7.4.1+r275405-lp150.12.1 libstdc++6-devel-gcc7-32bit-7.4.1+r275405-lp150.12.1 libubsan0-32bit-7.4.1+r275405-lp150.12.1 libubsan0-32bit-debuginfo-7.4.1+r275405-lp150.12.1 - openSUSE Leap 15.0 (noarch): gcc7-info-7.4.1+r275405-lp150.12.1 References: https://www.suse.com/security/cve/CVE-2019-14250.html https://www.suse.com/security/cve/CVE-2019-15847.html https://bugzilla.suse.com/1071995 https://bugzilla.suse.com/1141897 https://bugzilla.suse.com/1142649 https://bugzilla.suse.com/1148517 https://bugzilla.suse.com/1149145 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2364-1: moderate: Security update for gcc7
by opensuse-security＠opensuse.org 22 Oct '19

22 Oct '19

openSUSE Security Update: Security update for gcc7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2364-1 Rating: moderate References: #1071995 #1141897 #1142649 #1148517 #1149145 Cross-References: CVE-2019-14250 CVE-2019-15847 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has three fixes is now available. Description: This update for gcc7 to r275405 fixes the following issues: Security issues fixed: - CVE-2019-14250: Fixed an integer overflow in binutils (bsc#1142649). - CVE-2019-15847: Fixed an optimization in the POWER9 backend of gcc that could reduce the entropy of the random number generator (bsc#1149145). Non-security issue fixed: - Move Live Patching technology stack from kGraft to upstream klp (bsc#1071995, fate#323487). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2364=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): cpp7-7.4.1+r275405-lp151.2.6.1 cpp7-debuginfo-7.4.1+r275405-lp151.2.6.1 gcc7-7.4.1+r275405-lp151.2.6.1 gcc7-ada-7.4.1+r275405-lp151.2.6.1 gcc7-ada-debuginfo-7.4.1+r275405-lp151.2.6.1 gcc7-c++-7.4.1+r275405-lp151.2.6.1 gcc7-c++-debuginfo-7.4.1+r275405-lp151.2.6.1 gcc7-debuginfo-7.4.1+r275405-lp151.2.6.1 gcc7-debugsource-7.4.1+r275405-lp151.2.6.1 gcc7-fortran-7.4.1+r275405-lp151.2.6.1 gcc7-fortran-debuginfo-7.4.1+r275405-lp151.2.6.1 gcc7-go-7.4.1+r275405-lp151.2.6.1 gcc7-go-debuginfo-7.4.1+r275405-lp151.2.6.1 gcc7-locale-7.4.1+r275405-lp151.2.6.1 gcc7-obj-c++-7.4.1+r275405-lp151.2.6.1 gcc7-obj-c++-debuginfo-7.4.1+r275405-lp151.2.6.1 gcc7-objc-7.4.1+r275405-lp151.2.6.1 gcc7-objc-debuginfo-7.4.1+r275405-lp151.2.6.1 libada7-7.4.1+r275405-lp151.2.6.1 libada7-debuginfo-7.4.1+r275405-lp151.2.6.1 libasan4-7.4.1+r275405-lp151.2.6.1 libasan4-debuginfo-7.4.1+r275405-lp151.2.6.1 libcilkrts5-7.4.1+r275405-lp151.2.6.1 libcilkrts5-debuginfo-7.4.1+r275405-lp151.2.6.1 libgfortran4-7.4.1+r275405-lp151.2.6.1 libgfortran4-debuginfo-7.4.1+r275405-lp151.2.6.1 libgo11-7.4.1+r275405-lp151.2.6.1 libgo11-debuginfo-7.4.1+r275405-lp151.2.6.1 libobjc4-7.4.1+r275405-lp151.2.6.1 libobjc4-debuginfo-7.4.1+r275405-lp151.2.6.1 libstdc++6-devel-gcc7-7.4.1+r275405-lp151.2.6.1 libubsan0-7.4.1+r275405-lp151.2.6.1 libubsan0-debuginfo-7.4.1+r275405-lp151.2.6.1 - openSUSE Leap 15.1 (noarch): gcc7-info-7.4.1+r275405-lp151.2.6.1 - openSUSE Leap 15.1 (x86_64): gcc7-32bit-7.4.1+r275405-lp151.2.6.1 gcc7-ada-32bit-7.4.1+r275405-lp151.2.6.1 gcc7-c++-32bit-7.4.1+r275405-lp151.2.6.1 gcc7-fortran-32bit-7.4.1+r275405-lp151.2.6.1 gcc7-go-32bit-7.4.1+r275405-lp151.2.6.1 gcc7-obj-c++-32bit-7.4.1+r275405-lp151.2.6.1 gcc7-objc-32bit-7.4.1+r275405-lp151.2.6.1 libada7-32bit-7.4.1+r275405-lp151.2.6.1 libada7-32bit-debuginfo-7.4.1+r275405-lp151.2.6.1 libasan4-32bit-7.4.1+r275405-lp151.2.6.1 libasan4-32bit-debuginfo-7.4.1+r275405-lp151.2.6.1 libcilkrts5-32bit-7.4.1+r275405-lp151.2.6.1 libcilkrts5-32bit-debuginfo-7.4.1+r275405-lp151.2.6.1 libgfortran4-32bit-7.4.1+r275405-lp151.2.6.1 libgfortran4-32bit-debuginfo-7.4.1+r275405-lp151.2.6.1 libgo11-32bit-7.4.1+r275405-lp151.2.6.1 libgo11-32bit-debuginfo-7.4.1+r275405-lp151.2.6.1 libobjc4-32bit-7.4.1+r275405-lp151.2.6.1 libobjc4-32bit-debuginfo-7.4.1+r275405-lp151.2.6.1 libstdc++6-devel-gcc7-32bit-7.4.1+r275405-lp151.2.6.1 libubsan0-32bit-7.4.1+r275405-lp151.2.6.1 libubsan0-32bit-debuginfo-7.4.1+r275405-lp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-14250.html https://www.suse.com/security/cve/CVE-2019-15847.html https://bugzilla.suse.com/1071995 https://bugzilla.suse.com/1141897 https://bugzilla.suse.com/1142649 https://bugzilla.suse.com/1148517 https://bugzilla.suse.com/1149145 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2361-1: moderate: Security update for libreoffice
by opensuse-security＠opensuse.org 22 Oct '19

22 Oct '19

openSUSE Security Update: Security update for libreoffice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2361-1 Rating: moderate References: #1149943 #1149944 Cross-References: CVE-2019-9854 CVE-2019-9855 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libreoffice fixes the following issues: Updated to version 6.2.7.1. Security issues fixed: - CVE-2019-9854: Fixed unsafe URL assembly flaw (bsc#1149944). - CVE-2019-9855: Fixed path equivalence handling flaw (bsc#1149943) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2361=1 Package List: - openSUSE Leap 15.0 (noarch): libreoffice-branding-upstream-6.2.7.1-lp150.2.19.1 libreoffice-gdb-pretty-printers-6.2.7.1-lp150.2.19.1 libreoffice-glade-6.2.7.1-lp150.2.19.1 libreoffice-icon-themes-6.2.7.1-lp150.2.19.1 libreoffice-l10n-af-6.2.7.1-lp150.2.19.1 libreoffice-l10n-am-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ar-6.2.7.1-lp150.2.19.1 libreoffice-l10n-as-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ast-6.2.7.1-lp150.2.19.1 libreoffice-l10n-be-6.2.7.1-lp150.2.19.1 libreoffice-l10n-bg-6.2.7.1-lp150.2.19.1 libreoffice-l10n-bn-6.2.7.1-lp150.2.19.1 libreoffice-l10n-bn_IN-6.2.7.1-lp150.2.19.1 libreoffice-l10n-bo-6.2.7.1-lp150.2.19.1 libreoffice-l10n-br-6.2.7.1-lp150.2.19.1 libreoffice-l10n-brx-6.2.7.1-lp150.2.19.1 libreoffice-l10n-bs-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ca-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ca_valencia-6.2.7.1-lp150.2.19.1 libreoffice-l10n-cs-6.2.7.1-lp150.2.19.1 libreoffice-l10n-cy-6.2.7.1-lp150.2.19.1 libreoffice-l10n-da-6.2.7.1-lp150.2.19.1 libreoffice-l10n-de-6.2.7.1-lp150.2.19.1 libreoffice-l10n-dgo-6.2.7.1-lp150.2.19.1 libreoffice-l10n-dsb-6.2.7.1-lp150.2.19.1 libreoffice-l10n-dz-6.2.7.1-lp150.2.19.1 libreoffice-l10n-el-6.2.7.1-lp150.2.19.1 libreoffice-l10n-en-6.2.7.1-lp150.2.19.1 libreoffice-l10n-en_GB-6.2.7.1-lp150.2.19.1 libreoffice-l10n-en_ZA-6.2.7.1-lp150.2.19.1 libreoffice-l10n-eo-6.2.7.1-lp150.2.19.1 libreoffice-l10n-es-6.2.7.1-lp150.2.19.1 libreoffice-l10n-et-6.2.7.1-lp150.2.19.1 libreoffice-l10n-eu-6.2.7.1-lp150.2.19.1 libreoffice-l10n-fa-6.2.7.1-lp150.2.19.1 libreoffice-l10n-fi-6.2.7.1-lp150.2.19.1 libreoffice-l10n-fr-6.2.7.1-lp150.2.19.1 libreoffice-l10n-fy-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ga-6.2.7.1-lp150.2.19.1 libreoffice-l10n-gd-6.2.7.1-lp150.2.19.1 libreoffice-l10n-gl-6.2.7.1-lp150.2.19.1 libreoffice-l10n-gu-6.2.7.1-lp150.2.19.1 libreoffice-l10n-gug-6.2.7.1-lp150.2.19.1 libreoffice-l10n-he-6.2.7.1-lp150.2.19.1 libreoffice-l10n-hi-6.2.7.1-lp150.2.19.1 libreoffice-l10n-hr-6.2.7.1-lp150.2.19.1 libreoffice-l10n-hsb-6.2.7.1-lp150.2.19.1 libreoffice-l10n-hu-6.2.7.1-lp150.2.19.1 libreoffice-l10n-id-6.2.7.1-lp150.2.19.1 libreoffice-l10n-is-6.2.7.1-lp150.2.19.1 libreoffice-l10n-it-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ja-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ka-6.2.7.1-lp150.2.19.1 libreoffice-l10n-kab-6.2.7.1-lp150.2.19.1 libreoffice-l10n-kk-6.2.7.1-lp150.2.19.1 libreoffice-l10n-km-6.2.7.1-lp150.2.19.1 libreoffice-l10n-kmr_Latn-6.2.7.1-lp150.2.19.1 libreoffice-l10n-kn-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ko-6.2.7.1-lp150.2.19.1 libreoffice-l10n-kok-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ks-6.2.7.1-lp150.2.19.1 libreoffice-l10n-lb-6.2.7.1-lp150.2.19.1 libreoffice-l10n-lo-6.2.7.1-lp150.2.19.1 libreoffice-l10n-lt-6.2.7.1-lp150.2.19.1 libreoffice-l10n-lv-6.2.7.1-lp150.2.19.1 libreoffice-l10n-mai-6.2.7.1-lp150.2.19.1 libreoffice-l10n-mk-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ml-6.2.7.1-lp150.2.19.1 libreoffice-l10n-mn-6.2.7.1-lp150.2.19.1 libreoffice-l10n-mni-6.2.7.1-lp150.2.19.1 libreoffice-l10n-mr-6.2.7.1-lp150.2.19.1 libreoffice-l10n-my-6.2.7.1-lp150.2.19.1 libreoffice-l10n-nb-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ne-6.2.7.1-lp150.2.19.1 libreoffice-l10n-nl-6.2.7.1-lp150.2.19.1 libreoffice-l10n-nn-6.2.7.1-lp150.2.19.1 libreoffice-l10n-nr-6.2.7.1-lp150.2.19.1 libreoffice-l10n-nso-6.2.7.1-lp150.2.19.1 libreoffice-l10n-oc-6.2.7.1-lp150.2.19.1 libreoffice-l10n-om-6.2.7.1-lp150.2.19.1 libreoffice-l10n-or-6.2.7.1-lp150.2.19.1 libreoffice-l10n-pa-6.2.7.1-lp150.2.19.1 libreoffice-l10n-pl-6.2.7.1-lp150.2.19.1 libreoffice-l10n-pt_BR-6.2.7.1-lp150.2.19.1 libreoffice-l10n-pt_PT-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ro-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ru-6.2.7.1-lp150.2.19.1 libreoffice-l10n-rw-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sa_IN-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sat-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sd-6.2.7.1-lp150.2.19.1 libreoffice-l10n-si-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sid-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sk-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sl-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sq-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sr-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ss-6.2.7.1-lp150.2.19.1 libreoffice-l10n-st-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sv-6.2.7.1-lp150.2.19.1 libreoffice-l10n-sw_TZ-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ta-6.2.7.1-lp150.2.19.1 libreoffice-l10n-te-6.2.7.1-lp150.2.19.1 libreoffice-l10n-tg-6.2.7.1-lp150.2.19.1 libreoffice-l10n-th-6.2.7.1-lp150.2.19.1 libreoffice-l10n-tn-6.2.7.1-lp150.2.19.1 libreoffice-l10n-tr-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ts-6.2.7.1-lp150.2.19.1 libreoffice-l10n-tt-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ug-6.2.7.1-lp150.2.19.1 libreoffice-l10n-uk-6.2.7.1-lp150.2.19.1 libreoffice-l10n-uz-6.2.7.1-lp150.2.19.1 libreoffice-l10n-ve-6.2.7.1-lp150.2.19.1 libreoffice-l10n-vec-6.2.7.1-lp150.2.19.1 libreoffice-l10n-vi-6.2.7.1-lp150.2.19.1 libreoffice-l10n-xh-6.2.7.1-lp150.2.19.1 libreoffice-l10n-zh_CN-6.2.7.1-lp150.2.19.1 libreoffice-l10n-zh_TW-6.2.7.1-lp150.2.19.1 libreoffice-l10n-zu-6.2.7.1-lp150.2.19.1 - openSUSE Leap 15.0 (x86_64): libreoffice-6.2.7.1-lp150.2.19.1 libreoffice-base-6.2.7.1-lp150.2.19.1 libreoffice-base-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-base-drivers-firebird-6.2.7.1-lp150.2.19.1 libreoffice-base-drivers-firebird-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-base-drivers-postgresql-6.2.7.1-lp150.2.19.1 libreoffice-base-drivers-postgresql-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-calc-6.2.7.1-lp150.2.19.1 libreoffice-calc-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-calc-extensions-6.2.7.1-lp150.2.19.1 libreoffice-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-debugsource-6.2.7.1-lp150.2.19.1 libreoffice-draw-6.2.7.1-lp150.2.19.1 libreoffice-draw-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-filters-optional-6.2.7.1-lp150.2.19.1 libreoffice-gnome-6.2.7.1-lp150.2.19.1 libreoffice-gnome-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-gtk2-6.2.7.1-lp150.2.19.1 libreoffice-gtk2-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-gtk3-6.2.7.1-lp150.2.19.1 libreoffice-gtk3-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-impress-6.2.7.1-lp150.2.19.1 libreoffice-impress-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-mailmerge-6.2.7.1-lp150.2.19.1 libreoffice-math-6.2.7.1-lp150.2.19.1 libreoffice-math-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-officebean-6.2.7.1-lp150.2.19.1 libreoffice-officebean-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-pyuno-6.2.7.1-lp150.2.19.1 libreoffice-pyuno-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-qt5-6.2.7.1-lp150.2.19.1 libreoffice-qt5-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-sdk-6.2.7.1-lp150.2.19.1 libreoffice-sdk-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-sdk-doc-6.2.7.1-lp150.2.19.1 libreoffice-writer-6.2.7.1-lp150.2.19.1 libreoffice-writer-debuginfo-6.2.7.1-lp150.2.19.1 libreoffice-writer-extensions-6.2.7.1-lp150.2.19.1 libreofficekit-6.2.7.1-lp150.2.19.1 libreofficekit-devel-6.2.7.1-lp150.2.19.1 References: https://www.suse.com/security/cve/CVE-2019-9854.html https://www.suse.com/security/cve/CVE-2019-9855.html https://bugzilla.suse.com/1149943 https://bugzilla.suse.com/1149944 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2347-1: moderate: Security update for lighttpd
by opensuse-security＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Security Update: Security update for lighttpd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2347-1 Rating: moderate References: #1087369 #1111733 #1115016 #1153722 Cross-References: CVE-2018-19052 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that solves one vulnerability and has three fixes is now available. Description: This update for lighttpd to version 1.4.54 fixes the following issues: Security issues fixed: - CVE-2018-19052: Fixed a path traversal in mod_alias (boo#1115016). - Changed the default TLS configuration of lighttpd for better security out-of-the-box (boo#1087369). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2347=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2347=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2347=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2347=1 Package List: - openSUSE Leap 15.1 (x86_64): lighttpd-1.4.54-lp151.3.3.1 lighttpd-debuginfo-1.4.54-lp151.3.3.1 lighttpd-debugsource-1.4.54-lp151.3.3.1 lighttpd-mod_authn_gssapi-1.4.54-lp151.3.3.1 lighttpd-mod_authn_gssapi-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_authn_ldap-1.4.54-lp151.3.3.1 lighttpd-mod_authn_ldap-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_authn_mysql-1.4.54-lp151.3.3.1 lighttpd-mod_authn_mysql-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_authn_pam-1.4.54-lp151.3.3.1 lighttpd-mod_authn_pam-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_authn_sasl-1.4.54-lp151.3.3.1 lighttpd-mod_authn_sasl-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_cml-1.4.54-lp151.3.3.1 lighttpd-mod_cml-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_geoip-1.4.54-lp151.3.3.1 lighttpd-mod_geoip-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_magnet-1.4.54-lp151.3.3.1 lighttpd-mod_magnet-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_maxminddb-1.4.54-lp151.3.3.1 lighttpd-mod_maxminddb-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_mysql_vhost-1.4.54-lp151.3.3.1 lighttpd-mod_mysql_vhost-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_rrdtool-1.4.54-lp151.3.3.1 lighttpd-mod_rrdtool-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_trigger_b4_dl-1.4.54-lp151.3.3.1 lighttpd-mod_trigger_b4_dl-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_dbi-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_dbi-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_ldap-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_ldap-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_mysql-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_mysql-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_pgsql-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_pgsql-debuginfo-1.4.54-lp151.3.3.1 lighttpd-mod_webdav-1.4.54-lp151.3.3.1 lighttpd-mod_webdav-debuginfo-1.4.54-lp151.3.3.1 - openSUSE Leap 15.0 (x86_64): lighttpd-1.4.54-lp150.2.3.1 lighttpd-debuginfo-1.4.54-lp150.2.3.1 lighttpd-debugsource-1.4.54-lp150.2.3.1 lighttpd-mod_authn_gssapi-1.4.54-lp150.2.3.1 lighttpd-mod_authn_gssapi-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_authn_ldap-1.4.54-lp150.2.3.1 lighttpd-mod_authn_ldap-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_authn_mysql-1.4.54-lp150.2.3.1 lighttpd-mod_authn_mysql-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_authn_pam-1.4.54-lp150.2.3.1 lighttpd-mod_authn_pam-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_authn_sasl-1.4.54-lp150.2.3.1 lighttpd-mod_authn_sasl-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_cml-1.4.54-lp150.2.3.1 lighttpd-mod_cml-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_geoip-1.4.54-lp150.2.3.1 lighttpd-mod_geoip-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_magnet-1.4.54-lp150.2.3.1 lighttpd-mod_magnet-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_maxminddb-1.4.54-lp150.2.3.1 lighttpd-mod_maxminddb-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_mysql_vhost-1.4.54-lp150.2.3.1 lighttpd-mod_mysql_vhost-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_rrdtool-1.4.54-lp150.2.3.1 lighttpd-mod_rrdtool-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_trigger_b4_dl-1.4.54-lp150.2.3.1 lighttpd-mod_trigger_b4_dl-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_dbi-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_dbi-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_ldap-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_ldap-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_mysql-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_mysql-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_pgsql-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_pgsql-debuginfo-1.4.54-lp150.2.3.1 lighttpd-mod_webdav-1.4.54-lp150.2.3.1 lighttpd-mod_webdav-debuginfo-1.4.54-lp150.2.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): lighttpd-1.4.54-bp151.4.3.1 lighttpd-mod_authn_gssapi-1.4.54-bp151.4.3.1 lighttpd-mod_authn_ldap-1.4.54-bp151.4.3.1 lighttpd-mod_authn_mysql-1.4.54-bp151.4.3.1 lighttpd-mod_authn_pam-1.4.54-bp151.4.3.1 lighttpd-mod_authn_sasl-1.4.54-bp151.4.3.1 lighttpd-mod_cml-1.4.54-bp151.4.3.1 lighttpd-mod_geoip-1.4.54-bp151.4.3.1 lighttpd-mod_magnet-1.4.54-bp151.4.3.1 lighttpd-mod_maxminddb-1.4.54-bp151.4.3.1 lighttpd-mod_mysql_vhost-1.4.54-bp151.4.3.1 lighttpd-mod_rrdtool-1.4.54-bp151.4.3.1 lighttpd-mod_trigger_b4_dl-1.4.54-bp151.4.3.1 lighttpd-mod_vhostdb_dbi-1.4.54-bp151.4.3.1 lighttpd-mod_vhostdb_ldap-1.4.54-bp151.4.3.1 lighttpd-mod_vhostdb_mysql-1.4.54-bp151.4.3.1 lighttpd-mod_vhostdb_pgsql-1.4.54-bp151.4.3.1 lighttpd-mod_webdav-1.4.54-bp151.4.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): lighttpd-1.4.54-bp150.3.3.1 lighttpd-debuginfo-1.4.54-bp150.3.3.1 lighttpd-debugsource-1.4.54-bp150.3.3.1 lighttpd-mod_authn_gssapi-1.4.54-bp150.3.3.1 lighttpd-mod_authn_gssapi-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_authn_ldap-1.4.54-bp150.3.3.1 lighttpd-mod_authn_ldap-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_authn_mysql-1.4.54-bp150.3.3.1 lighttpd-mod_authn_mysql-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_authn_pam-1.4.54-bp150.3.3.1 lighttpd-mod_authn_pam-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_authn_sasl-1.4.54-bp150.3.3.1 lighttpd-mod_authn_sasl-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_cml-1.4.54-bp150.3.3.1 lighttpd-mod_cml-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_geoip-1.4.54-bp150.3.3.1 lighttpd-mod_geoip-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_magnet-1.4.54-bp150.3.3.1 lighttpd-mod_magnet-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_maxminddb-1.4.54-bp150.3.3.1 lighttpd-mod_maxminddb-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_mysql_vhost-1.4.54-bp150.3.3.1 lighttpd-mod_mysql_vhost-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_rrdtool-1.4.54-bp150.3.3.1 lighttpd-mod_rrdtool-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_trigger_b4_dl-1.4.54-bp150.3.3.1 lighttpd-mod_trigger_b4_dl-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_dbi-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_dbi-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_ldap-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_ldap-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_mysql-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_mysql-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_pgsql-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_pgsql-debuginfo-1.4.54-bp150.3.3.1 lighttpd-mod_webdav-1.4.54-bp150.3.3.1 lighttpd-mod_webdav-debuginfo-1.4.54-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-19052.html https://bugzilla.suse.com/1087369 https://bugzilla.suse.com/1111733 https://bugzilla.suse.com/1115016 https://bugzilla.suse.com/1153722 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0