September 2019 - openSUSE Security Announce

[security-announce] openSUSE-SU-2019:2158-1: moderate: Security update for openssl-1_1
by opensuse-security＠opensuse.org 24 Sep '19

24 Sep '19

openSUSE Security Update: Security update for openssl-1_1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2158-1 Rating: moderate References: #1150003 #1150250 Cross-References: CVE-2019-1547 CVE-2019-1563 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for openssl-1_1 fixes the following issues: OpenSSL Security Advisory [10 September 2019] * CVE-2019-1547: Added EC_GROUP_set_generator side channel attack avoidance. (bsc#1150003) * CVE-2019-1563: Fixed Bleichenbacher attack against cms/pkcs7 encryption transported key (bsc#1150250) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2158=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libopenssl-1_1-devel-1.1.0i-lp151.8.3.1 libopenssl1_1-1.1.0i-lp151.8.3.1 libopenssl1_1-debuginfo-1.1.0i-lp151.8.3.1 libopenssl1_1-hmac-1.1.0i-lp151.8.3.1 openssl-1_1-1.1.0i-lp151.8.3.1 openssl-1_1-debuginfo-1.1.0i-lp151.8.3.1 openssl-1_1-debugsource-1.1.0i-lp151.8.3.1 - openSUSE Leap 15.1 (x86_64): libopenssl-1_1-devel-32bit-1.1.0i-lp151.8.3.1 libopenssl1_1-32bit-1.1.0i-lp151.8.3.1 libopenssl1_1-32bit-debuginfo-1.1.0i-lp151.8.3.1 libopenssl1_1-hmac-32bit-1.1.0i-lp151.8.3.1 - openSUSE Leap 15.1 (noarch): openssl-1_1-doc-1.1.0i-lp151.8.3.1 References: https://www.suse.com/security/cve/CVE-2019-1547.html https://www.suse.com/security/cve/CVE-2019-1563.html https://bugzilla.suse.com/1150003 https://bugzilla.suse.com/1150250 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2157-1: moderate: Security update for openldap2
by opensuse-security＠opensuse.org 23 Sep '19

23 Sep '19

openSUSE Security Update: Security update for openldap2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2157-1 Rating: moderate References: #1073313 #1111388 #1114845 #1143194 #1143273 Cross-References: CVE-2017-17740 CVE-2019-13057 CVE-2019-13565 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has two fixes is now available. Description: This update for openldap2 fixes the following issues: Security issue fixed: - CVE-2019-13565: Fixed an authentication bypass when using SASL authentication and session encryption (bsc#1143194). - CVE-2019-13057: Fixed an issue with delegated database admin privileges (bsc#1143273). - CVE-2017-17740: When both the nops module and the member of overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation. (bsc#1073313) Non-security issues fixed: - Fixed broken shebang line in openldap_update_modules_path.sh (bsc#1114845). - Create files in /var/lib/ldap/ during initial start to allow for transactional updates (bsc#1111388) - Fixed incorrect post script call causing tmpfiles creation not to be run (bsc#1111388). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2157=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libldap-2_4-2-2.4.46-lp151.10.3.1 libldap-2_4-2-debuginfo-2.4.46-lp151.10.3.1 openldap2-2.4.46-lp151.10.3.1 openldap2-back-meta-2.4.46-lp151.10.3.1 openldap2-back-meta-debuginfo-2.4.46-lp151.10.3.1 openldap2-back-perl-2.4.46-lp151.10.3.1 openldap2-back-perl-debuginfo-2.4.46-lp151.10.3.1 openldap2-back-sock-2.4.46-lp151.10.3.1 openldap2-back-sock-debuginfo-2.4.46-lp151.10.3.1 openldap2-back-sql-2.4.46-lp151.10.3.1 openldap2-back-sql-debuginfo-2.4.46-lp151.10.3.1 openldap2-client-2.4.46-lp151.10.3.1 openldap2-client-debuginfo-2.4.46-lp151.10.3.1 openldap2-contrib-2.4.46-lp151.10.3.1 openldap2-contrib-debuginfo-2.4.46-lp151.10.3.1 openldap2-debuginfo-2.4.46-lp151.10.3.1 openldap2-debugsource-2.4.46-lp151.10.3.1 openldap2-devel-2.4.46-lp151.10.3.1 openldap2-devel-static-2.4.46-lp151.10.3.1 openldap2-ppolicy-check-password-1.2-lp151.10.3.1 openldap2-ppolicy-check-password-debuginfo-1.2-lp151.10.3.1 - openSUSE Leap 15.1 (noarch): libldap-data-2.4.46-lp151.10.3.1 openldap2-doc-2.4.46-lp151.10.3.1 - openSUSE Leap 15.1 (x86_64): libldap-2_4-2-32bit-2.4.46-lp151.10.3.1 libldap-2_4-2-32bit-debuginfo-2.4.46-lp151.10.3.1 openldap2-devel-32bit-2.4.46-lp151.10.3.1 References: https://www.suse.com/security/cve/CVE-2017-17740.html https://www.suse.com/security/cve/CVE-2019-13057.html https://www.suse.com/security/cve/CVE-2019-13565.html https://bugzilla.suse.com/1073313 https://bugzilla.suse.com/1111388 https://bugzilla.suse.com/1114845 https://bugzilla.suse.com/1143194 https://bugzilla.suse.com/1143273 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2156-1: important: Security update for chromium
by opensuse-security＠opensuse.org 20 Sep '19

20 Sep '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2156-1 Rating: important References: #1150425 Cross-References: CVE-2019-13659 CVE-2019-13660 CVE-2019-13661 CVE-2019-13662 CVE-2019-13663 CVE-2019-13664 CVE-2019-13665 CVE-2019-13666 CVE-2019-13667 CVE-2019-13668 CVE-2019-13669 CVE-2019-13670 CVE-2019-13671 CVE-2019-13673 CVE-2019-13674 CVE-2019-13675 CVE-2019-13676 CVE-2019-13677 CVE-2019-13678 CVE-2019-13679 CVE-2019-13680 CVE-2019-13681 CVE-2019-13682 CVE-2019-13683 CVE-2019-5870 CVE-2019-5871 CVE-2019-5872 CVE-2019-5874 CVE-2019-5875 CVE-2019-5876 CVE-2019-5877 CVE-2019-5878 CVE-2019-5879 CVE-2019-5880 CVE-2019-5881 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes 35 vulnerabilities is now available. Description: This update for chromium to 77.0.3865.75 fixes the following issues: Security issues fixed: - CVE-2019-5870: Fixed a use-after-free in media. (boo#1150425) - CVE-2019-5871: Fixed a heap overflow in Skia. (boo#1150425) - CVE-2019-5872: Fixed a use-after-free in Mojo (boo#1150425) - CVE-2019-5874: Fixed a behavior that made external URIs trigger other browsers. (boo#1150425) - CVE-2019-5875: Fixed a URL bar spoof via download redirect. (boo#1150425) - CVE-2019-5876: Fixed a use-after-free in media (boo#1150425) - CVE-2019-5877: Fixed an out-of-bounds access in V8. (boo#1150425) - CVE-2019-5878: Fixed a use-after-free in V8. (boo#1150425) - CVE-2019-5879: Fixed an extension issue that allowed the bypass of a same origin policy. (boo#1150425) - CVE-2019-5880: Fixed a SameSite cookie bypass. (boo#1150425) - CVE-2019-5881: Fixed an arbitrary read in SwiftShader. (boo#1150425) - CVE-2019-13659: Fixed an URL spoof. (boo#1150425) - CVE-2019-13660: Fixed a full screen notification overlap. (boo#1150425) - CVE-2019-13661: Fixed a full screen notification spoof. (boo#1150425) - CVE-2019-13662: Fixed a CSP bypass. (boo#1150425) - CVE-2019-13663: Fixed an IDN spoof. (boo#1150425) - CVE-2019-13664: Fixed a CSRF bypass. (boo#1150425) - CVE-2019-13665: Fixed a multiple file download protection bypass. (boo#1150425) - CVE-2019-13666: Fixed a side channel weakness using storage size estimate. (boo#1150425) - CVE-2019-13667: Fixed a URI bar spoof when using external app URIs. (boo#1150425) - CVE-2019-13668: Fixed a global window leak via console. (boo#1150425) - CVE-2019-13669: Fixed an HTTP authentication spoof. (boo#1150425) - CVE-2019-13670: Fixed a V8 memory corruption in regex. (boo#1150425) - CVE-2019-13671: Fixed a dialog box that failed to show the origin. (boo#1150425) - CVE-2019-13673: Fixed a cross-origin information leak using devtools. (boo#1150425) - CVE-2019-13674: Fixed an IDN spoofing opportunity. (boo#1150425) - CVE-2019-13675: Fixed an error that allowed extensions to be disabled by trailing slash. (boo#1150425) - CVE-2019-13676: Fixed a mistakenly shown Google URI in certificate warnings. (boo#1150425) - CVE-2019-13677: Fixed a lack of isolation in Chrome web store origin. (boo#1150425) - CVE-2019-13678: Fixed a download dialog spoofing opportunity. (boo#1150425) - CVE-2019-13679: Fixed a the necessity of a user gesture for printing. (boo#1150425) - CVE-2019-13680: Fixed an IP address spoofing error. (boo#1150425) - CVE-2019-13681: Fixed a bypass on download restrictions. (boo#1150425) - CVE-2019-13682: Fixed a site isolation bypass. (boo#1150425) - CVE-2019-13683: Fixed an exceptions leaked by devtools. (boo#1150425) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2156=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-77.0.3865.75-bp151.3.12.1 chromium-77.0.3865.75-bp151.3.12.1 References: https://www.suse.com/security/cve/CVE-2019-13659.html https://www.suse.com/security/cve/CVE-2019-13660.html https://www.suse.com/security/cve/CVE-2019-13661.html https://www.suse.com/security/cve/CVE-2019-13662.html https://www.suse.com/security/cve/CVE-2019-13663.html https://www.suse.com/security/cve/CVE-2019-13664.html https://www.suse.com/security/cve/CVE-2019-13665.html https://www.suse.com/security/cve/CVE-2019-13666.html https://www.suse.com/security/cve/CVE-2019-13667.html https://www.suse.com/security/cve/CVE-2019-13668.html https://www.suse.com/security/cve/CVE-2019-13669.html https://www.suse.com/security/cve/CVE-2019-13670.html https://www.suse.com/security/cve/CVE-2019-13671.html https://www.suse.com/security/cve/CVE-2019-13673.html https://www.suse.com/security/cve/CVE-2019-13674.html https://www.suse.com/security/cve/CVE-2019-13675.html https://www.suse.com/security/cve/CVE-2019-13676.html https://www.suse.com/security/cve/CVE-2019-13677.html https://www.suse.com/security/cve/CVE-2019-13678.html https://www.suse.com/security/cve/CVE-2019-13679.html https://www.suse.com/security/cve/CVE-2019-13680.html https://www.suse.com/security/cve/CVE-2019-13681.html https://www.suse.com/security/cve/CVE-2019-13682.html https://www.suse.com/security/cve/CVE-2019-13683.html https://www.suse.com/security/cve/CVE-2019-5870.html https://www.suse.com/security/cve/CVE-2019-5871.html https://www.suse.com/security/cve/CVE-2019-5872.html https://www.suse.com/security/cve/CVE-2019-5874.html https://www.suse.com/security/cve/CVE-2019-5875.html https://www.suse.com/security/cve/CVE-2019-5876.html https://www.suse.com/security/cve/CVE-2019-5877.html https://www.suse.com/security/cve/CVE-2019-5878.html https://www.suse.com/security/cve/CVE-2019-5879.html https://www.suse.com/security/cve/CVE-2019-5880.html https://www.suse.com/security/cve/CVE-2019-5881.html https://bugzilla.suse.com/1150425 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2155-1: important: Security update for chromium
by opensuse-security＠opensuse.org 20 Sep '19

20 Sep '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2155-1 Rating: important References: #1150425 Cross-References: CVE-2019-13659 CVE-2019-13660 CVE-2019-13661 CVE-2019-13662 CVE-2019-13663 CVE-2019-13664 CVE-2019-13665 CVE-2019-13666 CVE-2019-13667 CVE-2019-13668 CVE-2019-13669 CVE-2019-13670 CVE-2019-13671 CVE-2019-13673 CVE-2019-13674 CVE-2019-13675 CVE-2019-13676 CVE-2019-13677 CVE-2019-13678 CVE-2019-13679 CVE-2019-13680 CVE-2019-13681 CVE-2019-13682 CVE-2019-13683 CVE-2019-5870 CVE-2019-5871 CVE-2019-5872 CVE-2019-5874 CVE-2019-5875 CVE-2019-5876 CVE-2019-5877 CVE-2019-5878 CVE-2019-5879 CVE-2019-5880 CVE-2019-5881 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes 35 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Security issues fixed: - CVE-2019-5870: Fixed a use-after-free in media. (boo#1150425) - CVE-2019-5871: Fixed a heap overflow in Skia. (boo#1150425) - CVE-2019-5872: Fixed a use-after-free in Mojo (boo#1150425) - CVE-2019-5874: Fixed a behavior that made external URIs trigger other browsers. (boo#1150425) - CVE-2019-5875: Fixed a URL bar spoof via download redirect. (boo#1150425) - CVE-2019-5876: Fixed a use-after-free in media (boo#1150425) - CVE-2019-5877: Fixed an out-of-bounds access in V8. (boo#1150425) - CVE-2019-5878: Fixed a use-after-free in V8. (boo#1150425) - CVE-2019-5879: Fixed an extension issue that allowed the bypass of a same origin policy. (boo#1150425) - CVE-2019-5880: Fixed a SameSite cookie bypass. (boo#1150425) - CVE-2019-5881: Fixed an arbitrary read in SwiftShader. (boo#1150425) - CVE-2019-13659: Fixed an URL spoof. (boo#1150425) - CVE-2019-13660: Fixed a full screen notification overlap. (boo#1150425) - CVE-2019-13661: Fixed a full screen notification spoof. (boo#1150425) - CVE-2019-13662: Fixed a CSP bypass. (boo#1150425) - CVE-2019-13663: Fixed an IDN spoof. (boo#1150425) - CVE-2019-13664: Fixed a CSRF bypass. (boo#1150425) - CVE-2019-13665: Fixed a multiple file download protection bypass. (boo#1150425) - CVE-2019-13666: Fixed a side channel weakness using storage size estimate. (boo#1150425) - CVE-2019-13667: Fixed a URI bar spoof when using external app URIs. (boo#1150425) - CVE-2019-13668: Fixed a global window leak via console. (boo#1150425) - CVE-2019-13669: Fixed an HTTP authentication spoof. (boo#1150425) - CVE-2019-13670: Fixed a V8 memory corruption in regex. (boo#1150425) - CVE-2019-13671: Fixed a dialog box that failed to show the origin. (boo#1150425) - CVE-2019-13673: Fixed a cross-origin information leak using devtools. (boo#1150425) - CVE-2019-13674: Fixed an IDN spoofing opportunity. (boo#1150425) - CVE-2019-13675: Fixed an error that allowed extensions to be disabled by trailing slash. (boo#1150425) - CVE-2019-13676: Fixed a mistakenly shown Google URI in certificate warnings. (boo#1150425) - CVE-2019-13677: Fixed a lack of isolation in Chrome web store origin. (boo#1150425) - CVE-2019-13678: Fixed a download dialog spoofing opportunity. (boo#1150425) - CVE-2019-13679: Fixed a the necessity of a user gesture for printing. (boo#1150425) - CVE-2019-13680: Fixed an IP address spoofing error. (boo#1150425) - CVE-2019-13681: Fixed a bypass on download restrictions. (boo#1150425) - CVE-2019-13682: Fixed a site isolation bypass. (boo#1150425) - CVE-2019-13683: Fixed an exception leaked by devtools. (boo#1150425) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2155=1 Package List: - openSUSE Backports SLE-15 (aarch64 x86_64): chromedriver-77.0.3865.75-bp150.231.1 chromium-77.0.3865.75-bp150.231.1 References: https://www.suse.com/security/cve/CVE-2019-13659.html https://www.suse.com/security/cve/CVE-2019-13660.html https://www.suse.com/security/cve/CVE-2019-13661.html https://www.suse.com/security/cve/CVE-2019-13662.html https://www.suse.com/security/cve/CVE-2019-13663.html https://www.suse.com/security/cve/CVE-2019-13664.html https://www.suse.com/security/cve/CVE-2019-13665.html https://www.suse.com/security/cve/CVE-2019-13666.html https://www.suse.com/security/cve/CVE-2019-13667.html https://www.suse.com/security/cve/CVE-2019-13668.html https://www.suse.com/security/cve/CVE-2019-13669.html https://www.suse.com/security/cve/CVE-2019-13670.html https://www.suse.com/security/cve/CVE-2019-13671.html https://www.suse.com/security/cve/CVE-2019-13673.html https://www.suse.com/security/cve/CVE-2019-13674.html https://www.suse.com/security/cve/CVE-2019-13675.html https://www.suse.com/security/cve/CVE-2019-13676.html https://www.suse.com/security/cve/CVE-2019-13677.html https://www.suse.com/security/cve/CVE-2019-13678.html https://www.suse.com/security/cve/CVE-2019-13679.html https://www.suse.com/security/cve/CVE-2019-13680.html https://www.suse.com/security/cve/CVE-2019-13681.html https://www.suse.com/security/cve/CVE-2019-13682.html https://www.suse.com/security/cve/CVE-2019-13683.html https://www.suse.com/security/cve/CVE-2019-5870.html https://www.suse.com/security/cve/CVE-2019-5871.html https://www.suse.com/security/cve/CVE-2019-5872.html https://www.suse.com/security/cve/CVE-2019-5874.html https://www.suse.com/security/cve/CVE-2019-5875.html https://www.suse.com/security/cve/CVE-2019-5876.html https://www.suse.com/security/cve/CVE-2019-5877.html https://www.suse.com/security/cve/CVE-2019-5878.html https://www.suse.com/security/cve/CVE-2019-5879.html https://www.suse.com/security/cve/CVE-2019-5880.html https://www.suse.com/security/cve/CVE-2019-5881.html https://bugzilla.suse.com/1150425 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2152-1: important: Security update for chromium
by opensuse-security＠opensuse.org 19 Sep '19

19 Sep '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2152-1 Rating: important References: #1150425 Cross-References: CVE-2019-13659 CVE-2019-13660 CVE-2019-13661 CVE-2019-13662 CVE-2019-13663 CVE-2019-13664 CVE-2019-13665 CVE-2019-13666 CVE-2019-13667 CVE-2019-13668 CVE-2019-13669 CVE-2019-13670 CVE-2019-13671 CVE-2019-13673 CVE-2019-13674 CVE-2019-13675 CVE-2019-13676 CVE-2019-13677 CVE-2019-13678 CVE-2019-13679 CVE-2019-13680 CVE-2019-13681 CVE-2019-13682 CVE-2019-13683 CVE-2019-5870 CVE-2019-5871 CVE-2019-5872 CVE-2019-5874 CVE-2019-5875 CVE-2019-5876 CVE-2019-5877 CVE-2019-5878 CVE-2019-5879 CVE-2019-5880 CVE-2019-5881 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 35 vulnerabilities is now available. Description: This update for chromium to 77.0.3865.75 fixes the following issues: Security issues fixed: - CVE-2019-5870: Fixed a use-after-free in media. (boo#1150425) - CVE-2019-5871: Fixed a heap overflow in Skia. (boo#1150425) - CVE-2019-5872: Fixed a use-after-free in Mojo (boo#1150425) - CVE-2019-5874: Fixed a behavior that made external URIs trigger other browsers. (boo#1150425) - CVE-2019-5875: Fixed a URL bar spoof via download redirect. (boo#1150425) - CVE-2019-5876: Fixed a use-after-free in media (boo#1150425) - CVE-2019-5877: Fixed an out-of-bounds access in V8. (boo#1150425) - CVE-2019-5878: Fixed a use-after-free in V8. (boo#1150425) - CVE-2019-5879: Fixed an extension issue that allowed the bypass of a same origin policy. (boo#1150425) - CVE-2019-5880: Fixed a SameSite cookie bypass. (boo#1150425) - CVE-2019-5881: Fixed an arbitrary read in SwiftShader. (boo#1150425) - CVE-2019-13659: Fixed an URL spoof. (boo#1150425) - CVE-2019-13660: Fixed a full screen notification overlap. (boo#1150425) - CVE-2019-13661: Fixed a full screen notification spoof. (boo#1150425) - CVE-2019-13662: Fixed a CSP bypass. (boo#1150425) - CVE-2019-13663: Fixed an IDN spoof. (boo#1150425) - CVE-2019-13664: Fixed a CSRF bypass. (boo#1150425) - CVE-2019-13665: Fixed a multiple file download protection bypass. (boo#1150425) - CVE-2019-13666: Fixed a side channel weakness using storage size estimate. (boo#1150425) - CVE-2019-13667: Fixed a URI bar spoof when using external app URIs. (boo#1150425) - CVE-2019-13668: Fixed a global window leak via console. (boo#1150425) - CVE-2019-13669: Fixed an HTTP authentication spoof. (boo#1150425) - CVE-2019-13670: Fixed a V8 memory corruption in regex. (boo#1150425) - CVE-2019-13671: Fixed a dialog box that failed to show the origin. (boo#1150425) - CVE-2019-13673: Fixed a cross-origin information leak using devtools. (boo#1150425) - CVE-2019-13674: Fixed an IDN spoofing opportunity. (boo#1150425) - CVE-2019-13675: Fixed an error that allowed extensions to be disabled by trailing slash. (boo#1150425) - CVE-2019-13676: Fixed a mistakenly shown Google URI in certificate warnings. (boo#1150425) - CVE-2019-13677: Fixed a lack of isolation in Chrome web store origin. (boo#1150425) - CVE-2019-13678: Fixed a download dialog spoofing opportunity. (boo#1150425) - CVE-2019-13679: Fixed a the necessity of a user gesture for printing. (boo#1150425) - CVE-2019-13680: Fixed an IP address spoofing error. (boo#1150425) - CVE-2019-13681: Fixed a bypass on download restrictions. (boo#1150425) - CVE-2019-13682: Fixed a site isolation bypass. (boo#1150425) - CVE-2019-13683: Fixed an exceptions leaked by devtools. (boo#1150425) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2152=1 Package List: - openSUSE Leap 15.1 (x86_64): chromedriver-77.0.3865.75-lp151.2.30.1 chromedriver-debuginfo-77.0.3865.75-lp151.2.30.1 chromium-77.0.3865.75-lp151.2.30.1 chromium-debuginfo-77.0.3865.75-lp151.2.30.1 chromium-debugsource-77.0.3865.75-lp151.2.30.1 References: https://www.suse.com/security/cve/CVE-2019-13659.html https://www.suse.com/security/cve/CVE-2019-13660.html https://www.suse.com/security/cve/CVE-2019-13661.html https://www.suse.com/security/cve/CVE-2019-13662.html https://www.suse.com/security/cve/CVE-2019-13663.html https://www.suse.com/security/cve/CVE-2019-13664.html https://www.suse.com/security/cve/CVE-2019-13665.html https://www.suse.com/security/cve/CVE-2019-13666.html https://www.suse.com/security/cve/CVE-2019-13667.html https://www.suse.com/security/cve/CVE-2019-13668.html https://www.suse.com/security/cve/CVE-2019-13669.html https://www.suse.com/security/cve/CVE-2019-13670.html https://www.suse.com/security/cve/CVE-2019-13671.html https://www.suse.com/security/cve/CVE-2019-13673.html https://www.suse.com/security/cve/CVE-2019-13674.html https://www.suse.com/security/cve/CVE-2019-13675.html https://www.suse.com/security/cve/CVE-2019-13676.html https://www.suse.com/security/cve/CVE-2019-13677.html https://www.suse.com/security/cve/CVE-2019-13678.html https://www.suse.com/security/cve/CVE-2019-13679.html https://www.suse.com/security/cve/CVE-2019-13680.html https://www.suse.com/security/cve/CVE-2019-13681.html https://www.suse.com/security/cve/CVE-2019-13682.html https://www.suse.com/security/cve/CVE-2019-13683.html https://www.suse.com/security/cve/CVE-2019-5870.html https://www.suse.com/security/cve/CVE-2019-5871.html https://www.suse.com/security/cve/CVE-2019-5872.html https://www.suse.com/security/cve/CVE-2019-5874.html https://www.suse.com/security/cve/CVE-2019-5875.html https://www.suse.com/security/cve/CVE-2019-5876.html https://www.suse.com/security/cve/CVE-2019-5877.html https://www.suse.com/security/cve/CVE-2019-5878.html https://www.suse.com/security/cve/CVE-2019-5879.html https://www.suse.com/security/cve/CVE-2019-5880.html https://www.suse.com/security/cve/CVE-2019-5881.html https://bugzilla.suse.com/1150425 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2153-1: important: Security update for chromium
by opensuse-security＠opensuse.org 19 Sep '19

19 Sep '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2153-1 Rating: important References: #1150425 Cross-References: CVE-2019-13659 CVE-2019-13660 CVE-2019-13661 CVE-2019-13662 CVE-2019-13663 CVE-2019-13664 CVE-2019-13665 CVE-2019-13666 CVE-2019-13667 CVE-2019-13668 CVE-2019-13669 CVE-2019-13670 CVE-2019-13671 CVE-2019-13673 CVE-2019-13674 CVE-2019-13675 CVE-2019-13676 CVE-2019-13677 CVE-2019-13678 CVE-2019-13679 CVE-2019-13680 CVE-2019-13681 CVE-2019-13682 CVE-2019-13683 CVE-2019-5870 CVE-2019-5871 CVE-2019-5872 CVE-2019-5874 CVE-2019-5875 CVE-2019-5876 CVE-2019-5877 CVE-2019-5878 CVE-2019-5879 CVE-2019-5880 CVE-2019-5881 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 35 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Security issues fixed: - CVE-2019-5870: Fixed a use-after-free in media. (boo#1150425) - CVE-2019-5871: Fixed a heap overflow in Skia. (boo#1150425) - CVE-2019-5872: Fixed a use-after-free in Mojo (boo#1150425) - CVE-2019-5874: Fixed a behavior that made external URIs trigger other browsers. (boo#1150425) - CVE-2019-5875: Fixed a URL bar spoof via download redirect. (boo#1150425) - CVE-2019-5876: Fixed a use-after-free in media (boo#1150425) - CVE-2019-5877: Fixed an out-of-bounds access in V8. (boo#1150425) - CVE-2019-5878: Fixed a use-after-free in V8. (boo#1150425) - CVE-2019-5879: Fixed an extension issue that allowed the bypass of a same origin policy. (boo#1150425) - CVE-2019-5880: Fixed a SameSite cookie bypass. (boo#1150425) - CVE-2019-5881: Fixed an arbitrary read in SwiftShader. (boo#1150425) - CVE-2019-13659: Fixed an URL spoof. (boo#1150425) - CVE-2019-13660: Fixed a full screen notification overlap. (boo#1150425) - CVE-2019-13661: Fixed a full screen notification spoof. (boo#1150425) - CVE-2019-13662: Fixed a CSP bypass. (boo#1150425) - CVE-2019-13663: Fixed an IDN spoof. (boo#1150425) - CVE-2019-13664: Fixed a CSRF bypass. (boo#1150425) - CVE-2019-13665: Fixed a multiple file download protection bypass. (boo#1150425) - CVE-2019-13666: Fixed a side channel weakness using storage size estimate. (boo#1150425) - CVE-2019-13667: Fixed a URI bar spoof when using external app URIs. (boo#1150425) - CVE-2019-13668: Fixed a global window leak via console. (boo#1150425) - CVE-2019-13669: Fixed an HTTP authentication spoof. (boo#1150425) - CVE-2019-13670: Fixed a V8 memory corruption in regex. (boo#1150425) - CVE-2019-13671: Fixed a dialog box that failed to show the origin. (boo#1150425) - CVE-2019-13673: Fixed a cross-origin information leak using devtools. (boo#1150425) - CVE-2019-13674: Fixed an IDN spoofing opportunity. (boo#1150425) - CVE-2019-13675: Fixed an error that allowed extensions to be disabled by trailing slash. (boo#1150425) - CVE-2019-13676: Fixed a mistakenly shown Google URI in certificate warnings. (boo#1150425) - CVE-2019-13677: Fixed a lack of isolation in Chrome web store origin. (boo#1150425) - CVE-2019-13678: Fixed a download dialog spoofing opportunity. (boo#1150425) - CVE-2019-13679: Fixed a the necessity of a user gesture for printing. (boo#1150425) - CVE-2019-13680: Fixed an IP address spoofing error. (boo#1150425) - CVE-2019-13681: Fixed a bypass on download restrictions. (boo#1150425) - CVE-2019-13682: Fixed a site isolation bypass. (boo#1150425) - CVE-2019-13683: Fixed an exception leaked by devtools. (boo#1150425) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2153=1 Package List: - openSUSE Leap 15.0 (x86_64): chromedriver-77.0.3865.75-lp150.239.1 chromedriver-debuginfo-77.0.3865.75-lp150.239.1 chromium-77.0.3865.75-lp150.239.1 chromium-debuginfo-77.0.3865.75-lp150.239.1 chromium-debugsource-77.0.3865.75-lp150.239.1 References: https://www.suse.com/security/cve/CVE-2019-13659.html https://www.suse.com/security/cve/CVE-2019-13660.html https://www.suse.com/security/cve/CVE-2019-13661.html https://www.suse.com/security/cve/CVE-2019-13662.html https://www.suse.com/security/cve/CVE-2019-13663.html https://www.suse.com/security/cve/CVE-2019-13664.html https://www.suse.com/security/cve/CVE-2019-13665.html https://www.suse.com/security/cve/CVE-2019-13666.html https://www.suse.com/security/cve/CVE-2019-13667.html https://www.suse.com/security/cve/CVE-2019-13668.html https://www.suse.com/security/cve/CVE-2019-13669.html https://www.suse.com/security/cve/CVE-2019-13670.html https://www.suse.com/security/cve/CVE-2019-13671.html https://www.suse.com/security/cve/CVE-2019-13673.html https://www.suse.com/security/cve/CVE-2019-13674.html https://www.suse.com/security/cve/CVE-2019-13675.html https://www.suse.com/security/cve/CVE-2019-13676.html https://www.suse.com/security/cve/CVE-2019-13677.html https://www.suse.com/security/cve/CVE-2019-13678.html https://www.suse.com/security/cve/CVE-2019-13679.html https://www.suse.com/security/cve/CVE-2019-13680.html https://www.suse.com/security/cve/CVE-2019-13681.html https://www.suse.com/security/cve/CVE-2019-13682.html https://www.suse.com/security/cve/CVE-2019-13683.html https://www.suse.com/security/cve/CVE-2019-5870.html https://www.suse.com/security/cve/CVE-2019-5871.html https://www.suse.com/security/cve/CVE-2019-5872.html https://www.suse.com/security/cve/CVE-2019-5874.html https://www.suse.com/security/cve/CVE-2019-5875.html https://www.suse.com/security/cve/CVE-2019-5876.html https://www.suse.com/security/cve/CVE-2019-5877.html https://www.suse.com/security/cve/CVE-2019-5878.html https://www.suse.com/security/cve/CVE-2019-5879.html https://www.suse.com/security/cve/CVE-2019-5880.html https://www.suse.com/security/cve/CVE-2019-5881.html https://bugzilla.suse.com/1150425 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2149-1: important: Security update for curl
by opensuse-security＠opensuse.org 17 Sep '19

17 Sep '19

openSUSE Security Update: Security update for curl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2149-1 Rating: important References: #1149495 #1149496 Cross-References: CVE-2019-5481 CVE-2019-5482 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for curl fixes the following issues: Security issues fixed: - CVE-2019-5481: Fixed FTP-KRB double-free during kerberos FTP data transfer (bsc#1149495). - CVE-2019-5482: Fixed TFTP small blocksize heap buffer overflow (bsc#1149496). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2149=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): curl-7.60.0-lp151.5.6.1 curl-debuginfo-7.60.0-lp151.5.6.1 curl-debugsource-7.60.0-lp151.5.6.1 curl-mini-7.60.0-lp151.5.6.1 curl-mini-debuginfo-7.60.0-lp151.5.6.1 curl-mini-debugsource-7.60.0-lp151.5.6.1 libcurl-devel-7.60.0-lp151.5.6.1 libcurl-mini-devel-7.60.0-lp151.5.6.1 libcurl4-7.60.0-lp151.5.6.1 libcurl4-debuginfo-7.60.0-lp151.5.6.1 libcurl4-mini-7.60.0-lp151.5.6.1 libcurl4-mini-debuginfo-7.60.0-lp151.5.6.1 - openSUSE Leap 15.1 (x86_64): libcurl-devel-32bit-7.60.0-lp151.5.6.1 libcurl4-32bit-7.60.0-lp151.5.6.1 libcurl4-32bit-debuginfo-7.60.0-lp151.5.6.1 References: https://www.suse.com/security/cve/CVE-2019-5481.html https://www.suse.com/security/cve/CVE-2019-5482.html https://bugzilla.suse.com/1149495 https://bugzilla.suse.com/1149496 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2145-1: moderate: Security update for python-Werkzeug
by opensuse-security＠opensuse.org 17 Sep '19

17 Sep '19

openSUSE Security Update: Security update for python-Werkzeug ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2145-1 Rating: moderate References: #1145383 Cross-References: CVE-2019-14806 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-Werkzeug fixes the following issues: Security issue fixed: - CVE-2019-14806: Fixed the development server in Docker, the debugger security pin is now unique per container (bsc#1145383). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2145=1 Package List: - openSUSE Leap 15.1 (noarch): python-Werkzeug-doc-0.14.1-lp151.2.3.1 python2-Werkzeug-0.14.1-lp151.2.3.1 python3-Werkzeug-0.14.1-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-14806.html https://bugzilla.suse.com/1145383 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2143-1: moderate: Security update for podman
by opensuse-security＠opensuse.org 16 Sep '19

16 Sep '19

openSUSE Security Update: Security update for podman ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2143-1 Rating: moderate References: #1144065 Cross-References: CVE-2019-10214 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for podman fixes the following issues: Security issue fixed: - CVE-2019-10214: Fixed missing enforcement of TLS connections. (bsc#1144065) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2143=1 Package List: - openSUSE Leap 15.1 (noarch): podman-cni-config-1.4.4-lp151.3.6.1 - openSUSE Leap 15.1 (x86_64): podman-1.4.4-lp151.3.6.1 References: https://www.suse.com/security/cve/CVE-2019-10214.html https://bugzilla.suse.com/1144065 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2142-1: moderate: Security update for samba
by opensuse-security＠opensuse.org 16 Sep '19

16 Sep '19

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2142-1 Rating: moderate References: #1141267 #1144059 Cross-References: CVE-2019-10197 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for samba fixes the following issues: Security issue fixed: - CVE-2019-10197: Fixed user escape from share path definition (bsc#1141267). Bug fix: - Prepare for future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2142=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ctdb-4.9.5+git.187.71edee57d5a-lp151.2.6.1 ctdb-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 ctdb-pcp-pmda-4.9.5+git.187.71edee57d5a-lp151.2.6.1 ctdb-pcp-pmda-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 ctdb-tests-4.9.5+git.187.71edee57d5a-lp151.2.6.1 ctdb-tests-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libdcerpc-binding0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libdcerpc-binding0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libdcerpc-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libdcerpc-samr-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libdcerpc-samr0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libdcerpc-samr0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libdcerpc0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libdcerpc0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-krb5pac-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-krb5pac0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-krb5pac0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-nbt-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-nbt0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-nbt0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-standard-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-standard0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-standard0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libnetapi-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libnetapi0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libnetapi0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-credentials-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-credentials0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-credentials0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-errors-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-errors0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-errors0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-hostconfig-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-hostconfig0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-hostconfig0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-passdb-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-passdb0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-passdb0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-policy-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-policy-python-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-policy-python3-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-policy0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-policy0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-policy0-python3-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-policy0-python3-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-util-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-util0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-util0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamdb-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamdb0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamdb0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbclient-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbclient0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbclient0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbconf-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbconf0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbconf0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbldap-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbldap2-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbldap2-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libtevent-util-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libtevent-util0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libtevent-util0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libwbclient-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libwbclient0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libwbclient0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-ad-dc-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-ad-dc-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-client-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-client-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-core-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-debugsource-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-dsdb-modules-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-dsdb-modules-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-libs-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-libs-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-libs-python-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-libs-python-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-libs-python3-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-libs-python3-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-pidl-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-python-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-python-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-python3-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-python3-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-test-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-test-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-winbind-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-winbind-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 - openSUSE Leap 15.1 (noarch): samba-doc-4.9.5+git.187.71edee57d5a-lp151.2.6.1 - openSUSE Leap 15.1 (x86_64): libdcerpc-binding0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libdcerpc-binding0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libdcerpc-samr0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libdcerpc-samr0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libdcerpc0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libdcerpc0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-krb5pac0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-krb5pac0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-nbt0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-nbt0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-standard0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-standard0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libnetapi0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libnetapi0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-credentials0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-credentials0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-errors0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-errors0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-hostconfig0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-hostconfig0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-passdb0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-passdb0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-policy0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-policy0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-policy0-python3-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-policy0-python3-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-util0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-util0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamdb0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamdb0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbclient0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbclient0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbconf0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbconf0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbldap2-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbldap2-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libtevent-util0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libtevent-util0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libwbclient0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libwbclient0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-ad-dc-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-ad-dc-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-ceph-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-ceph-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-client-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-client-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-libs-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-libs-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-libs-python-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-libs-python-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-libs-python3-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-libs-python3-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-winbind-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-winbind-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-10197.html https://bugzilla.suse.com/1141267 https://bugzilla.suse.com/1144059 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0