March 2018 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1083846] VUL-0: CVE-2018-0491: tor: use-after-free in KIST scheduler remote relay DoS
by bugzilla_noreply＠novell.com 06 Mar '18

06 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1083846 http://bugzilla.suse.com/show_bug.cgi?id=1083846#c5 --- Comment #5 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2018:0620-1: An update that fixes two vulnerabilities is now available. Category: security (moderate) Bug References: 1083845,1083846 CVE References: CVE-2018-0490,CVE-2018-0491 Sources used: SUSE Package Hub for SUSE Linux Enterprise 12 (src): tor-0.3.2.10-14.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1083845] VUL-0: CVE-2018-0490: tor: null-pointer crash in directory authority protocol list code (TROVE-2018-001)
by bugzilla_noreply＠novell.com 06 Mar '18

06 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1083845 http://bugzilla.suse.com/show_bug.cgi?id=1083845#c5 --- Comment #5 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2018:0620-1: An update that fixes two vulnerabilities is now available. Category: security (moderate) Bug References: 1083845,1083846 CVE References: CVE-2018-0490,CVE-2018-0491 Sources used: SUSE Package Hub for SUSE Linux Enterprise 12 (src): tor-0.3.2.10-14.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1084061] VUL-1: CVE-2018-7712,CVE-2018-7713,CVE-2018-7714: opencv: Multiple reachable asserts allow for DoS
by bugzilla_noreply＠novell.com 06 Mar '18

06 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1084061 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1052437] Pulseaudio not shutting down properly after logging out
by bugzilla_noreply＠novell.com 06 Mar '18

06 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1052437 http://bugzilla.suse.com/show_bug.cgi?id=1052437#c49 --- Comment #49 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2018:0617-1: An update that has one recommended fix can now be installed. Category: recommended (important) Bug References: 1052437 CVE References: Sources used: openSUSE Leap 42.3 (src): pulseaudio-9.0-8.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1083413] VUL-0: CVE-2017-18197: jgraphx: XML External Entity (XXE) not prevented
by bugzilla_noreply＠novell.com 06 Mar '18

06 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1083413 http://bugzilla.suse.com/show_bug.cgi?id=1083413#c7 --- Comment #7 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2018:0616-1: An update that fixes one vulnerability is now available. Category: security (moderate) Bug References: 1083413 CVE References: CVE-2017-18197 Sources used: openSUSE Leap 42.3 (src): jgraphx-3.1.2.1-7.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1081631] VUL-0: CVE-2018-7247: leptonica: Unbound memory access
by bugzilla_noreply＠novell.com 06 Mar '18

06 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1081631 http://bugzilla.suse.com/show_bug.cgi?id=1081631#c5 --- Comment #5 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2018:0615-1: An update that fixes three vulnerabilities is now available. Category: security (moderate) Bug References: 1079358,1081576,1081631 CVE References: CVE-2018-3836,CVE-2018-7186,CVE-2018-7247 Sources used: openSUSE Leap 42.3 (src): leptonica-1.72-9.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1081576] VUL-1: CVE-2018-7186 leptonica: Stack-based buffer overflows in gplotRead() and ptaReadStream() when parsing crafted files can lead to denial of service
by bugzilla_noreply＠novell.com 06 Mar '18

06 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1081576 http://bugzilla.suse.com/show_bug.cgi?id=1081576#c3 --- Comment #3 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2018:0615-1: An update that fixes three vulnerabilities is now available. Category: security (moderate) Bug References: 1079358,1081576,1081631 CVE References: CVE-2018-3836,CVE-2018-7186,CVE-2018-7247 Sources used: openSUSE Leap 42.3 (src): leptonica-1.72-9.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1079358] VUL-0: CVE-2018-3836: leptonica: gplotMakeOutput command injection
by bugzilla_noreply＠novell.com 06 Mar '18

06 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1079358 http://bugzilla.suse.com/show_bug.cgi?id=1079358#c9 --- Comment #9 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2018:0615-1: An update that fixes three vulnerabilities is now available. Category: security (moderate) Bug References: 1079358,1081576,1081631 CVE References: CVE-2018-3836,CVE-2018-7186,CVE-2018-7247 Sources used: openSUSE Leap 42.3 (src): leptonica-1.72-9.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1083846] VUL-0: CVE-2018-0491: tor: use-after-free in KIST scheduler remote relay DoS
by bugzilla_noreply＠novell.com 06 Mar '18

06 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1083846 http://bugzilla.suse.com/show_bug.cgi?id=1083846#c4 --- Comment #4 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2018:0614-1: An update that fixes two vulnerabilities is now available. Category: security (moderate) Bug References: 1083845,1083846 CVE References: CVE-2018-0490,CVE-2018-0491 Sources used: openSUSE Leap 42.3 (src): tor-0.3.2.10-15.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1083845] VUL-0: CVE-2018-0490: tor: null-pointer crash in directory authority protocol list code (TROVE-2018-001)
by bugzilla_noreply＠novell.com 06 Mar '18

06 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1083845 http://bugzilla.suse.com/show_bug.cgi?id=1083845#c4 --- Comment #4 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2018:0614-1: An update that fixes two vulnerabilities is now available. Category: security (moderate) Bug References: 1083845,1083846 CVE References: CVE-2018-0490,CVE-2018-0491 Sources used: openSUSE Leap 42.3 (src): tor-0.3.2.10-15.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0