December 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2018:4031-1: moderate: Security update for postgresql10
by opensuse-security＠opensuse.org 07 Dec '18

07 Dec '18

openSUSE Security Update: Security update for postgresql10 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4031-1 Rating: moderate References: #1114837 Cross-References: CVE-2018-16850 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for postgresql10 fixes the following issues: Security issue fixed: - CVE-2018-16850: Fixed improper quoting of transition table names when pg_dump emits CREATE TRIGGER could have caused privilege escalation (bsc#1114837). Non-security issues fixed: - Update to release 10.6: * https://www.postgresql.org/docs/current/static/release-10-6.html This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1493=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libecpg6-10.6-lp150.3.6.1 libecpg6-debuginfo-10.6-lp150.3.6.1 libpq5-10.6-lp150.3.6.1 libpq5-debuginfo-10.6-lp150.3.6.1 postgresql10-10.6-lp150.3.6.1 postgresql10-contrib-10.6-lp150.3.6.1 postgresql10-contrib-debuginfo-10.6-lp150.3.6.1 postgresql10-debuginfo-10.6-lp150.3.6.1 postgresql10-debugsource-10.6-lp150.3.6.1 postgresql10-devel-10.6-lp150.3.6.1 postgresql10-devel-debuginfo-10.6-lp150.3.6.1 postgresql10-plperl-10.6-lp150.3.6.1 postgresql10-plperl-debuginfo-10.6-lp150.3.6.1 postgresql10-plpython-10.6-lp150.3.6.1 postgresql10-plpython-debuginfo-10.6-lp150.3.6.1 postgresql10-pltcl-10.6-lp150.3.6.1 postgresql10-pltcl-debuginfo-10.6-lp150.3.6.1 postgresql10-server-10.6-lp150.3.6.1 postgresql10-server-debuginfo-10.6-lp150.3.6.1 postgresql10-test-10.6-lp150.3.6.1 - openSUSE Leap 15.0 (noarch): postgresql10-docs-10.6-lp150.3.6.1 - openSUSE Leap 15.0 (x86_64): libecpg6-32bit-10.6-lp150.3.6.1 libecpg6-32bit-debuginfo-10.6-lp150.3.6.1 libpq5-32bit-10.6-lp150.3.6.1 libpq5-32bit-debuginfo-10.6-lp150.3.6.1 References: https://www.suse.com/security/cve/CVE-2018-16850.html https://bugzilla.suse.com/1114837

1 0

openSUSE-SU-2018:4030-1: moderate: Recommended update for php7
by opensuse-security＠opensuse.org 07 Dec '18

07 Dec '18

openSUSE Security Update: Recommended update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4030-1 Rating: moderate References: #1117107 Cross-References: CVE-2018-19518 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for php7 fixes the following issues: Security issue fixed: - CVE-2018-19518: Fixed imap_open script injection flaw (bsc#1117107). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1507=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-mod_php7-7.0.7-52.1 apache2-mod_php7-debuginfo-7.0.7-52.1 php7-7.0.7-52.1 php7-bcmath-7.0.7-52.1 php7-bcmath-debuginfo-7.0.7-52.1 php7-bz2-7.0.7-52.1 php7-bz2-debuginfo-7.0.7-52.1 php7-calendar-7.0.7-52.1 php7-calendar-debuginfo-7.0.7-52.1 php7-ctype-7.0.7-52.1 php7-ctype-debuginfo-7.0.7-52.1 php7-curl-7.0.7-52.1 php7-curl-debuginfo-7.0.7-52.1 php7-dba-7.0.7-52.1 php7-dba-debuginfo-7.0.7-52.1 php7-debuginfo-7.0.7-52.1 php7-debugsource-7.0.7-52.1 php7-devel-7.0.7-52.1 php7-dom-7.0.7-52.1 php7-dom-debuginfo-7.0.7-52.1 php7-enchant-7.0.7-52.1 php7-enchant-debuginfo-7.0.7-52.1 php7-exif-7.0.7-52.1 php7-exif-debuginfo-7.0.7-52.1 php7-fastcgi-7.0.7-52.1 php7-fastcgi-debuginfo-7.0.7-52.1 php7-fileinfo-7.0.7-52.1 php7-fileinfo-debuginfo-7.0.7-52.1 php7-firebird-7.0.7-52.1 php7-firebird-debuginfo-7.0.7-52.1 php7-fpm-7.0.7-52.1 php7-fpm-debuginfo-7.0.7-52.1 php7-ftp-7.0.7-52.1 php7-ftp-debuginfo-7.0.7-52.1 php7-gd-7.0.7-52.1 php7-gd-debuginfo-7.0.7-52.1 php7-gettext-7.0.7-52.1 php7-gettext-debuginfo-7.0.7-52.1 php7-gmp-7.0.7-52.1 php7-gmp-debuginfo-7.0.7-52.1 php7-iconv-7.0.7-52.1 php7-iconv-debuginfo-7.0.7-52.1 php7-imap-7.0.7-52.1 php7-imap-debuginfo-7.0.7-52.1 php7-intl-7.0.7-52.1 php7-intl-debuginfo-7.0.7-52.1 php7-json-7.0.7-52.1 php7-json-debuginfo-7.0.7-52.1 php7-ldap-7.0.7-52.1 php7-ldap-debuginfo-7.0.7-52.1 php7-mbstring-7.0.7-52.1 php7-mbstring-debuginfo-7.0.7-52.1 php7-mcrypt-7.0.7-52.1 php7-mcrypt-debuginfo-7.0.7-52.1 php7-mysql-7.0.7-52.1 php7-mysql-debuginfo-7.0.7-52.1 php7-odbc-7.0.7-52.1 php7-odbc-debuginfo-7.0.7-52.1 php7-opcache-7.0.7-52.1 php7-opcache-debuginfo-7.0.7-52.1 php7-openssl-7.0.7-52.1 php7-openssl-debuginfo-7.0.7-52.1 php7-pcntl-7.0.7-52.1 php7-pcntl-debuginfo-7.0.7-52.1 php7-pdo-7.0.7-52.1 php7-pdo-debuginfo-7.0.7-52.1 php7-pgsql-7.0.7-52.1 php7-pgsql-debuginfo-7.0.7-52.1 php7-phar-7.0.7-52.1 php7-phar-debuginfo-7.0.7-52.1 php7-posix-7.0.7-52.1 php7-posix-debuginfo-7.0.7-52.1 php7-pspell-7.0.7-52.1 php7-pspell-debuginfo-7.0.7-52.1 php7-readline-7.0.7-52.1 php7-readline-debuginfo-7.0.7-52.1 php7-shmop-7.0.7-52.1 php7-shmop-debuginfo-7.0.7-52.1 php7-snmp-7.0.7-52.1 php7-snmp-debuginfo-7.0.7-52.1 php7-soap-7.0.7-52.1 php7-soap-debuginfo-7.0.7-52.1 php7-sockets-7.0.7-52.1 php7-sockets-debuginfo-7.0.7-52.1 php7-sqlite-7.0.7-52.1 php7-sqlite-debuginfo-7.0.7-52.1 php7-sysvmsg-7.0.7-52.1 php7-sysvmsg-debuginfo-7.0.7-52.1 php7-sysvsem-7.0.7-52.1 php7-sysvsem-debuginfo-7.0.7-52.1 php7-sysvshm-7.0.7-52.1 php7-sysvshm-debuginfo-7.0.7-52.1 php7-tidy-7.0.7-52.1 php7-tidy-debuginfo-7.0.7-52.1 php7-tokenizer-7.0.7-52.1 php7-tokenizer-debuginfo-7.0.7-52.1 php7-wddx-7.0.7-52.1 php7-wddx-debuginfo-7.0.7-52.1 php7-xmlreader-7.0.7-52.1 php7-xmlreader-debuginfo-7.0.7-52.1 php7-xmlrpc-7.0.7-52.1 php7-xmlrpc-debuginfo-7.0.7-52.1 php7-xmlwriter-7.0.7-52.1 php7-xmlwriter-debuginfo-7.0.7-52.1 php7-xsl-7.0.7-52.1 php7-xsl-debuginfo-7.0.7-52.1 php7-zip-7.0.7-52.1 php7-zip-debuginfo-7.0.7-52.1 php7-zlib-7.0.7-52.1 php7-zlib-debuginfo-7.0.7-52.1 - openSUSE Leap 42.3 (noarch): php7-pear-7.0.7-52.1 php7-pear-Archive_Tar-7.0.7-52.1 References: https://www.suse.com/security/cve/CVE-2018-19518.html https://bugzilla.suse.com/1117107

1 0

openSUSE-SU-2018:4029-1: Security update for messagelib
by opensuse-security＠opensuse.org 07 Dec '18

07 Dec '18

openSUSE Security Update: Security update for messagelib ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4029-1 Rating: low References: #1117958 Cross-References: CVE-2018-19516 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for messagelib fixes the following issues: The following security vulnerability was addressed: - CVE-2018-19516: Fix a potential issue with opening messages in a new browser window when displaying mails as HTML (boo#1117958). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1508=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1508=1 Package List: - openSUSE Leap 15.0 (x86_64): messagelib-17.12.3-lp150.2.6.1 messagelib-debuginfo-17.12.3-lp150.2.6.1 messagelib-debugsource-17.12.3-lp150.2.6.1 messagelib-devel-17.12.3-lp150.2.6.1 - openSUSE Leap 15.0 (noarch): messagelib-lang-17.12.3-lp150.2.6.1 - openSUSE Backports SLE-15 (x86_64): messagelib-17.12.3-bp150.3.6.1 messagelib-devel-17.12.3-bp150.3.6.1 - openSUSE Backports SLE-15 (noarch): messagelib-lang-17.12.3-bp150.3.6.1 References: https://www.suse.com/security/cve/CVE-2018-19516.html https://bugzilla.suse.com/1117958

1 0

openSUSE-OU-2018:4028-1: Optional update for python-mutt-ics
by maintenance＠opensuse.org 07 Dec '18

07 Dec '18

openSUSE Optional Update: Optional update for python-mutt-ics ______________________________________________________________________________ Announcement ID: openSUSE-OU-2018:4028-1 Rating: low References: #1117044 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for python-mutt-ics introduces pakage to distribution: - python-mutt-ics can be used to read ics invitations in mutt Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1512=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1512=1 Package List: - openSUSE Leap 15.0 (noarch): python2-mutt-ics-0.8-lp150.2.1 python3-mutt-ics-0.8-lp150.2.1 - openSUSE Backports SLE-15 (noarch): python2-mutt-ics-0.8-bp150.2.1 python3-mutt-ics-0.8-bp150.2.1 References: https://bugzilla.suse.com/1117044

1 0

openSUSE-RU-2018:4027-1: moderate: Recommended update for transactional-update
by maintenance＠opensuse.org 07 Dec '18

07 Dec '18

openSUSE Recommended Update: Recommended update for transactional-update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4027-1 Rating: moderate References: #1088676 #1097619 #1105992 #1111319 #1111321 #1111786 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for transactional-update fixes the following issues: - Update to version 2.11 - Update man page to explain new /etc overlay handling - Add special handling for migrating away from old overlay directory - Read default update method for systemd service from config file - Add package "transactional-update-zypp-config" to prevent accidental transactional-update uninstallation on transactional systems (boo#1111319) - Use "up" for systemd service on non-rolling release distributions (boo#1111321) - Introduce /etc overlays - Add compatibility with snapper >= 0.7.0 - Correctly detect BTRFS ID when using multiple snapper configurations - Fix disappearing prompt in "shell" command when application was updated - Prevent accidental rollback on fast reboots (boo#1111786) - Use zypper attribute packages-to-change if available (boo#1105992 and boo#1097619) - Add kexec as reboot alternative - Added explicit --with-doc / --without-doc build configure opttions for enforcing or excluding documentation build - Removed precompiled documentation (boo#1088676) - Added more dependency checks to configure script - Small improvements to documentation - Restored compatibility with older rsync versions not supporting the -x filter - Small bugfixes for cleanup in error situations - Fix possible incorrect detection of snapshots numbers during cleanup - Mention parent in snapshot description - Add dependencies for documentation build (boo#1088676) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1513=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1513=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): transactional-update-2.11-lp150.2.9.1 transactional-update-debuginfo-2.11-lp150.2.9.1 transactional-update-debugsource-2.11-lp150.2.9.1 - openSUSE Leap 15.0 (noarch): transactional-update-zypp-config-2.11-lp150.2.9.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): transactional-update-2.11-bp150.2.6.1 transactional-update-debuginfo-2.11-bp150.2.6.1 transactional-update-debugsource-2.11-bp150.2.6.1 - openSUSE Backports SLE-15 (noarch): transactional-update-zypp-config-2.11-bp150.2.6.1 References: https://bugzilla.suse.com/1088676 https://bugzilla.suse.com/1097619 https://bugzilla.suse.com/1105992 https://bugzilla.suse.com/1111319 https://bugzilla.suse.com/1111321 https://bugzilla.suse.com/1111786

1 0

openSUSE-RU-2018:4025-1: Recommended update for prosody
by maintenance＠opensuse.org 07 Dec '18

07 Dec '18

openSUSE Recommended Update: Recommended update for prosody ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4025-1 Rating: low References: #1117774 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for prosody fixes the following issues: Security issue fixed: - Fixed information disclosure list of members of members-only and password-protected rooms (boo#1117774). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1491=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1491=1 Package List: - openSUSE Leap 15.0 (x86_64): prosody-0.10.3-lp150.3.9.1 prosody-debuginfo-0.10.3-lp150.3.9.1 prosody-debugsource-0.10.3-lp150.3.9.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): prosody-0.10.3-bp150.2.3.1 prosody-debuginfo-0.10.3-bp150.2.3.1 prosody-debugsource-0.10.3-bp150.2.3.1 References: https://bugzilla.suse.com/1117774

1 0

openSUSE-RU-2018:4015-1: moderate: Recommended update for festival
by maintenance＠opensuse.org 07 Dec '18

07 Dec '18

openSUSE Recommended Update: Recommended update for festival ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4015-1 Rating: moderate References: #1116010 #1116808 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for festival fixes the following issues: - festival triggered a segfault when synthesizing speec (boo#1116808) - the SysV init script was converted into a native systemd service (boo#1116010) This update also contains all upstream improvements and fixes in the 2.5.0 release. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1488=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1488=1 Package List: - openSUSE Leap 15.0 (x86_64): festival-2.5.0-lp150.3.3.1 festival-debuginfo-2.5.0-lp150.3.3.1 festival-debugsource-2.5.0-lp150.3.3.1 festival-devel-2.5.0-lp150.3.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): festival-2.5.0-bp150.3.3.1 festival-debuginfo-2.5.0-bp150.3.3.1 festival-debugsource-2.5.0-bp150.3.3.1 festival-devel-2.5.0-bp150.3.3.1 References: https://bugzilla.suse.com/1116010 https://bugzilla.suse.com/1116808

1 0

openSUSE-RU-2018:4014-1: moderate: Recommended update for claws-mail
by maintenance＠opensuse.org 07 Dec '18

07 Dec '18

openSUSE Recommended Update: Recommended update for claws-mail ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4014-1 Rating: moderate References: #1116917 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for claws-mail fixes the following issues: - When replying to an e-mail, the quoted message and the recipient addresses may unexpectedly mismatch (boo#1116917) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1489=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1489=1 Package List: - openSUSE Leap 15.0 (noarch): claws-mail-lang-3.16.0-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): claws-mail-3.16.0-lp150.2.3.1 claws-mail-debuginfo-3.16.0-lp150.2.3.1 claws-mail-debugsource-3.16.0-lp150.2.3.1 claws-mail-devel-3.16.0-lp150.2.3.1 - openSUSE Backports SLE-15 (x86_64): claws-mail-3.16.0-bp150.2.3.1 claws-mail-debuginfo-3.16.0-bp150.2.3.1 claws-mail-debugsource-3.16.0-bp150.2.3.1 claws-mail-devel-3.16.0-bp150.2.3.1 - openSUSE Backports SLE-15 (noarch): claws-mail-lang-3.16.0-bp150.2.3.1 References: https://bugzilla.suse.com/1116917

1 0

openSUSE-RU-2018:4013-1: moderate: Recommended update for aaa_base
by maintenance＠opensuse.org 07 Dec '18

07 Dec '18

openSUSE Recommended Update: Recommended update for aaa_base ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4013-1 Rating: moderate References: #1040613 #1095969 #1102310 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for aaa_base provides the following fixes: - Get mixed use case of service wrapper script straight. (bsc#1040613) - Fix an error at login if java system directory is empty. (bsc#1102310) - Add a test for xdgdir/applications before adding data directory (bsc#1095969) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1490=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): aaa_base-13.2+git20140911.61c1681-28.9.1 aaa_base-debuginfo-13.2+git20140911.61c1681-28.9.1 aaa_base-debugsource-13.2+git20140911.61c1681-28.9.1 aaa_base-extras-13.2+git20140911.61c1681-28.9.1 aaa_base-malloccheck-13.2+git20140911.61c1681-28.9.1 References: https://bugzilla.suse.com/1040613 https://bugzilla.suse.com/1095969 https://bugzilla.suse.com/1102310

1 0

openSUSE-SU-2018:4007-1: important: Security update for postgresql94
by opensuse-security＠opensuse.org 07 Dec '18

07 Dec '18

openSUSE Security Update: Security update for postgresql94 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4007-1 Rating: important References: #1104199 Cross-References: CVE-2018-10915 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for postgresql94 to 9.4.19 fixes the following security issue: - CVE-2018-10915: libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with "host" or "hostaddr" connection parameters from untrusted input, attackers could have bypassed client-side connection security features, obtain access to higher privileged connections or potentially cause other impact SQL injection, by causing the PQescape() functions to malfunction (bsc#1104199). A dump/restore is not required for this update unless you use the functions query_to_xml, cursor_to_xml, cursor_to_xmlschema, query_to_xmlschema, and query_to_xml_and_xmlschema. In this case please see the first entry of https://www.postgresql.org/docs/9.4/static/release-9-4-18.html This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1482=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): postgresql94-9.4.19-24.1 postgresql94-contrib-9.4.19-24.1 postgresql94-contrib-debuginfo-9.4.19-24.1 postgresql94-debuginfo-9.4.19-24.1 postgresql94-debugsource-9.4.19-24.1 postgresql94-devel-9.4.19-24.1 postgresql94-devel-debuginfo-9.4.19-24.1 postgresql94-libs-debugsource-9.4.19-24.1 postgresql94-plperl-9.4.19-24.1 postgresql94-plperl-debuginfo-9.4.19-24.1 postgresql94-plpython-9.4.19-24.1 postgresql94-plpython-debuginfo-9.4.19-24.1 postgresql94-pltcl-9.4.19-24.1 postgresql94-pltcl-debuginfo-9.4.19-24.1 postgresql94-server-9.4.19-24.1 postgresql94-server-debuginfo-9.4.19-24.1 postgresql94-test-9.4.19-24.1 - openSUSE Leap 42.3 (noarch): postgresql94-docs-9.4.19-24.1 References: https://www.suse.com/security/cve/CVE-2018-10915.html https://bugzilla.suse.com/1104199

1 0