October 2018 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1109823] VUL-0: CVE-2018-16587: otrs: Remote File Deletion (OSA-2018-04)
by bugzilla_noreply＠novell.com 02 Oct '18

02 Oct '18

http://bugzilla.suse.com/show_bug.cgi?id=1109823 SMASH SMASH <smash_bz(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| | | |CVSSv2:NVD:CVE-2018-14242:6 | |.8:(AV:N/AC:M/Au:N/C:P/I:P/ | |A:P) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1109822] VUL-1: CVE-2018-16586: otrs: Loading External Image or CSS Resources (OSA-2018-05)
by bugzilla_noreply＠novell.com 02 Oct '18

02 Oct '18

http://bugzilla.suse.com/show_bug.cgi?id=1109822 SMASH SMASH <smash_bz(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| | | |CVSSv2:NVD:CVE-2018-11623:6 | |.8:(AV:N/AC:M/Au:N/C:P/I:P/ | |A:P) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1109179] VUL-1: CVE-2018-17175: python-marshmallow: Information leak due to invalid usage of the schema "only" option
by bugzilla_noreply＠novell.com 02 Oct '18

02 Oct '18

http://bugzilla.suse.com/show_bug.cgi?id=1109179 SMASH SMASH <smash_bz(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| | | |CVSSv3:RedHat:CVE-2018-1717 | |5:5.9:(AV:N/AC:H/PR:N/UI:N/ | |S:U/C:H/I:N/A:N) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1107591] VUL-0: CVE-2018-1000801: okular: Directory traversal in function unpackDocumentArchive() in core/document.cpp
by bugzilla_noreply＠novell.com 02 Oct '18

02 Oct '18

http://bugzilla.suse.com/show_bug.cgi?id=1107591 SMASH SMASH <smash_bz(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| | | |CVSSv3:RedHat:CVE-2018-1000 | |801:5.5:(AV:L/AC:L/PR:N/UI: | |R/S:U/C:N/I:H/A:N) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1107593] VUL-1: CVE-2018-16648: mupdf: fz_append_byte function in fitz/buffer.c allows remote attackers to cause a denial of service (segmentation fault)
by bugzilla_noreply＠novell.com 02 Oct '18

02 Oct '18

http://bugzilla.suse.com/show_bug.cgi?id=1107593 SMASH SMASH <smash_bz(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| | | |CVSSv3:RedHat:CVE-2018-1636 | |8:3.3:(AV:L/AC:L/PR:N/UI:R/ | |S:U/C:N/I:N/A:L) | |CVSSv3:RedHat:CVE-2018-1664 | |8:3.3:(AV:L/AC:L/PR:N/UI:R/ | |S:U/C:N/I:N/A:L) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1107595] VUL-1: CVE-2018-16647: mupdf: pdf_get_xref_entry function in pdf/pdf-xref.c allows remote attackers to cause a denial of service (segmentation fault infz_write_data in fitz/output.c)
by bugzilla_noreply＠novell.com 02 Oct '18

02 Oct '18

http://bugzilla.suse.com/show_bug.cgi?id=1107595 SMASH SMASH <smash_bz(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| | | |CVSSv3:RedHat:CVE-2018-1664 | |7:3.3:(AV:L/AC:L/PR:N/UI:R/ | |S:U/C:N/I:N/A:L) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1106279] VUL-1: CVE-2018-1000656 python-flask: Improper Input Validation via crafted JSON file
by bugzilla_noreply＠novell.com 02 Oct '18

02 Oct '18

1 0

[Bug 1103838] CVE-2018-14955: squirrelmail: various issues fixed in SquirrelMail 1.4.22
by bugzilla_noreply＠novell.com 02 Oct '18

02 Oct '18

1 0

[Bug 1103360] VUL-1: CVE-2018-5812: libraw: NULL pointer dereference in nikon_coolscan_load_raw
by bugzilla_noreply＠novell.com 02 Oct '18

02 Oct '18

http://bugzilla.suse.com/show_bug.cgi?id=1103360 SMASH SMASH <smash_bz(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| | | |CVSSv3:RedHat:CVE-2018-5812 | |:3.3:(AV:L/AC:L/PR:N/UI:R/S | |:U/C:N/I:N/A:L) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1103359] VUL-1: CVE-2018-5811: libraw: out-of-bounds read in nikon_coolscan_load_raw
by bugzilla_noreply＠novell.com 02 Oct '18

02 Oct '18

http://bugzilla.suse.com/show_bug.cgi?id=1103359 SMASH SMASH <smash_bz(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| | | |CVSSv3:RedHat:CVE-2018-5811 | |:4.4:(AV:L/AC:L/PR:N/UI:R/S | |:U/C:L/I:N/A:L) -- You are receiving this mail because: You are on the CC list for the bug.

1 0