August 2017 - openSUSE Security Announce

[security-announce] SUSE-SU-2017:2049-1: important: Security update for Linux Kernel Live Patch 12 for SLE 12 SP1
by opensuse-security＠opensuse.org 05 Aug '17

05 Aug '17

SUSE Security Update: Security update for Linux Kernel Live Patch 12 for SLE 12 SP1 ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:2049-1 Rating: important References: #1027575 #1038564 #1042892 #1046191 #1050751 Cross-References: CVE-2017-2636 CVE-2017-7533 CVE-2017-7645 CVE-2017-8890 CVE-2017-9242 Affected Products: SUSE Linux Enterprise Server for SAP 12-SP1 SUSE Linux Enterprise Server 12-SP1-LTSS ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for the Linux Kernel 3.12.69-60_64_29 fixes several issues. The following security bugs were fixed: - CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege (bsc#1050751). - CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel allowed remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c (bsc#1046191). - CVE-2017-2636: Race condition in drivers/tty/n_hdlc.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline (bsc#1027575). - CVE-2017-9242: The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel is too late in checking whether an overwrite of an skb data structure may occur, which allowed local users to cause a denial of service (system crash) via crafted system calls (bsc#1042892). - CVE-2017-8890: The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel allowed attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call (bsc#1038564). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for SAP 12-SP1: zypper in -t patch SUSE-SLE-SAP-12-SP1-2017-1261=1 - SUSE Linux Enterprise Server 12-SP1-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2017-1261=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server for SAP 12-SP1 (x86_64): kgraft-patch-3_12_69-60_64_29-default-6-2.1 kgraft-patch-3_12_69-60_64_29-xen-6-2.1 - SUSE Linux Enterprise Server 12-SP1-LTSS (x86_64): kgraft-patch-3_12_69-60_64_29-default-6-2.1 kgraft-patch-3_12_69-60_64_29-xen-6-2.1 References: https://www.suse.com/security/cve/CVE-2017-2636.html https://www.suse.com/security/cve/CVE-2017-7533.html https://www.suse.com/security/cve/CVE-2017-7645.html https://www.suse.com/security/cve/CVE-2017-8890.html https://www.suse.com/security/cve/CVE-2017-9242.html https://bugzilla.suse.com/1027575 https://bugzilla.suse.com/1038564 https://bugzilla.suse.com/1042892 https://bugzilla.suse.com/1046191 https://bugzilla.suse.com/1050751 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:2046-1: important: Security update for Linux Kernel Live Patch 8 for SLE 12 SP2
by opensuse-security＠opensuse.org 04 Aug '17

04 Aug '17

SUSE Security Update: Security update for Linux Kernel Live Patch 8 for SLE 12 SP2 ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:2046-1 Rating: important References: #1038564 #1042364 #1042892 #1046191 #1046202 #1046206 #1047518 #1050751 Cross-References: CVE-2017-7533 CVE-2017-7645 CVE-2017-8797 CVE-2017-8890 CVE-2017-9077 CVE-2017-9242 Affected Products: SUSE Linux Enterprise Live Patching 12 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has two fixes is now available. Description: This update for the Linux Kernel 4.4.59-92_20 fixes several issues. The following security bugs were fixed: - CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege (bsc#1050751). - CVE-2017-8797: The NFSv4 server in the Linux kernel did not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used as an array index for dereferencing, which leads to an OOPS and eventually a DoS of knfsd and a soft-lockup of the whole system (bsc#1046202) - CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel allowed remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c (bsc#1046191). - CVE-2017-9242: The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel is too late in checking whether an overwrite of an skb data structure may occur, which allowed local users to cause a denial of service (system crash) via crafted system calls (bsc#1042892). - CVE-2017-9077: The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890 (bsc#1042364). - CVE-2017-8890: The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel allowed attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call (bsc#1038564). The following non-security bug was fixed: - Fix for a btrfs deadlock between btrfs-cleaner and user space thread regression, which could cause spurious WARN_ON's from fs/btrfs/qgroup.c:1445 during patch application if BTRFS quota groups are enabled. (bsc#1047518) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Live Patching 12: zypper in -t patch SUSE-SLE-Live-Patching-12-2017-1258=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Live Patching 12 (x86_64): kgraft-patch-4_4_59-92_20-default-3-2.1 References: https://www.suse.com/security/cve/CVE-2017-7533.html https://www.suse.com/security/cve/CVE-2017-7645.html https://www.suse.com/security/cve/CVE-2017-8797.html https://www.suse.com/security/cve/CVE-2017-8890.html https://www.suse.com/security/cve/CVE-2017-9077.html https://www.suse.com/security/cve/CVE-2017-9242.html https://bugzilla.suse.com/1038564 https://bugzilla.suse.com/1042364 https://bugzilla.suse.com/1042892 https://bugzilla.suse.com/1046191 https://bugzilla.suse.com/1046202 https://bugzilla.suse.com/1046206 https://bugzilla.suse.com/1047518 https://bugzilla.suse.com/1050751 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:2043-1: important: Security update for Linux Kernel Live Patch 3 for SLE 12 SP2
by opensuse-security＠opensuse.org 04 Aug '17

04 Aug '17

SUSE Security Update: Security update for Linux Kernel Live Patch 3 for SLE 12 SP2 ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:2043-1 Rating: important References: #1027575 #1038564 #1042364 #1042892 #1046191 #1046202 #1046206 #1050751 Cross-References: CVE-2017-2636 CVE-2017-7533 CVE-2017-7645 CVE-2017-8797 CVE-2017-8890 CVE-2017-9077 CVE-2017-9242 Affected Products: SUSE Linux Enterprise Live Patching 12 ______________________________________________________________________________ An update that solves 7 vulnerabilities and has one errata is now available. Description: This update for the Linux Kernel 4.4.21-90 fixes several issues. The following security bugs were fixed: - CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege (bsc#1050751). - CVE-2017-8797: The NFSv4 server in the Linux kernel did not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used as an array index for dereferencing, which leads to an OOPS and eventually a DoS of knfsd and a soft-lockup of the whole system (bsc#1046202) - CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel allowed remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c (bsc#1046191). - CVE-2017-2636: Race condition in drivers/tty/n_hdlc.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline (bsc#1027575). - CVE-2017-9242: The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel is too late in checking whether an overwrite of an skb data structure may occur, which allowed local users to cause a denial of service (system crash) via crafted system calls (bsc#1042892). - CVE-2017-9077: The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890 (bsc#1042364). - CVE-2017-8890: The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel allowed attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call (bsc#1038564). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Live Patching 12: zypper in -t patch SUSE-SLE-Live-Patching-12-2017-1257=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Live Patching 12 (x86_64): kgraft-patch-4_4_21-90-default-7-2.1 References: https://www.suse.com/security/cve/CVE-2017-2636.html https://www.suse.com/security/cve/CVE-2017-7533.html https://www.suse.com/security/cve/CVE-2017-7645.html https://www.suse.com/security/cve/CVE-2017-8797.html https://www.suse.com/security/cve/CVE-2017-8890.html https://www.suse.com/security/cve/CVE-2017-9077.html https://www.suse.com/security/cve/CVE-2017-9242.html https://bugzilla.suse.com/1027575 https://bugzilla.suse.com/1038564 https://bugzilla.suse.com/1042364 https://bugzilla.suse.com/1042892 https://bugzilla.suse.com/1046191 https://bugzilla.suse.com/1046202 https://bugzilla.suse.com/1046206 https://bugzilla.suse.com/1050751 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:2042-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 04 Aug '17

04 Aug '17

SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:2042-1 Rating: important References: #1049483 Cross-References: CVE-2017-7533 Affected Products: SUSE OpenStack Cloud 6 SUSE Linux Enterprise Server for SAP 12-SP1 SUSE Linux Enterprise Server 12-SP1-LTSS SUSE Linux Enterprise Module for Public Cloud 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The SUSE Linux Enterprise 12 SP1 kernel was updated to 3.12.74 to receive the following security fix: - CVE-2017-7533: Bug in inotify code allowed privilege escalation (bnc#1049483). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud 6: zypper in -t patch SUSE-OpenStack-Cloud-6-2017-1254=1 - SUSE Linux Enterprise Server for SAP 12-SP1: zypper in -t patch SUSE-SLE-SAP-12-SP1-2017-1254=1 - SUSE Linux Enterprise Server 12-SP1-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2017-1254=1 - SUSE Linux Enterprise Module for Public Cloud 12: zypper in -t patch SUSE-SLE-Module-Public-Cloud-12-2017-1254=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE OpenStack Cloud 6 (noarch): kernel-devel-3.12.74-60.64.51.1 kernel-macros-3.12.74-60.64.51.1 kernel-source-3.12.74-60.64.51.1 - SUSE OpenStack Cloud 6 (x86_64): kernel-default-3.12.74-60.64.51.1 kernel-default-base-3.12.74-60.64.51.1 kernel-default-base-debuginfo-3.12.74-60.64.51.1 kernel-default-debuginfo-3.12.74-60.64.51.1 kernel-default-debugsource-3.12.74-60.64.51.1 kernel-default-devel-3.12.74-60.64.51.1 kernel-syms-3.12.74-60.64.51.1 kernel-xen-3.12.74-60.64.51.1 kernel-xen-base-3.12.74-60.64.51.1 kernel-xen-base-debuginfo-3.12.74-60.64.51.1 kernel-xen-debuginfo-3.12.74-60.64.51.1 kernel-xen-debugsource-3.12.74-60.64.51.1 kernel-xen-devel-3.12.74-60.64.51.1 kgraft-patch-3_12_74-60_64_51-default-1-2.1 kgraft-patch-3_12_74-60_64_51-xen-1-2.1 - SUSE Linux Enterprise Server for SAP 12-SP1 (ppc64le x86_64): kernel-default-3.12.74-60.64.51.1 kernel-default-base-3.12.74-60.64.51.1 kernel-default-base-debuginfo-3.12.74-60.64.51.1 kernel-default-debuginfo-3.12.74-60.64.51.1 kernel-default-debugsource-3.12.74-60.64.51.1 kernel-default-devel-3.12.74-60.64.51.1 kernel-syms-3.12.74-60.64.51.1 - SUSE Linux Enterprise Server for SAP 12-SP1 (noarch): kernel-devel-3.12.74-60.64.51.1 kernel-macros-3.12.74-60.64.51.1 kernel-source-3.12.74-60.64.51.1 - SUSE Linux Enterprise Server for SAP 12-SP1 (x86_64): kernel-xen-3.12.74-60.64.51.1 kernel-xen-base-3.12.74-60.64.51.1 kernel-xen-base-debuginfo-3.12.74-60.64.51.1 kernel-xen-debuginfo-3.12.74-60.64.51.1 kernel-xen-debugsource-3.12.74-60.64.51.1 kernel-xen-devel-3.12.74-60.64.51.1 kgraft-patch-3_12_74-60_64_51-default-1-2.1 kgraft-patch-3_12_74-60_64_51-xen-1-2.1 - SUSE Linux Enterprise Server 12-SP1-LTSS (ppc64le s390x x86_64): kernel-default-3.12.74-60.64.51.1 kernel-default-base-3.12.74-60.64.51.1 kernel-default-base-debuginfo-3.12.74-60.64.51.1 kernel-default-debuginfo-3.12.74-60.64.51.1 kernel-default-debugsource-3.12.74-60.64.51.1 kernel-default-devel-3.12.74-60.64.51.1 kernel-syms-3.12.74-60.64.51.1 - SUSE Linux Enterprise Server 12-SP1-LTSS (noarch): kernel-devel-3.12.74-60.64.51.1 kernel-macros-3.12.74-60.64.51.1 kernel-source-3.12.74-60.64.51.1 - SUSE Linux Enterprise Server 12-SP1-LTSS (x86_64): kernel-xen-3.12.74-60.64.51.1 kernel-xen-base-3.12.74-60.64.51.1 kernel-xen-base-debuginfo-3.12.74-60.64.51.1 kernel-xen-debuginfo-3.12.74-60.64.51.1 kernel-xen-debugsource-3.12.74-60.64.51.1 kernel-xen-devel-3.12.74-60.64.51.1 kgraft-patch-3_12_74-60_64_51-default-1-2.1 kgraft-patch-3_12_74-60_64_51-xen-1-2.1 - SUSE Linux Enterprise Server 12-SP1-LTSS (s390x): kernel-default-man-3.12.74-60.64.51.1 - SUSE Linux Enterprise Module for Public Cloud 12 (x86_64): kernel-ec2-3.12.74-60.64.51.1 kernel-ec2-debuginfo-3.12.74-60.64.51.1 kernel-ec2-debugsource-3.12.74-60.64.51.1 kernel-ec2-devel-3.12.74-60.64.51.1 kernel-ec2-extra-3.12.74-60.64.51.1 kernel-ec2-extra-debuginfo-3.12.74-60.64.51.1 References: https://www.suse.com/security/cve/CVE-2017-7533.html https://bugzilla.suse.com/1049483 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:2041-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 03 Aug '17

03 Aug '17

SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:2041-1 Rating: important References: #1049483 Cross-References: CVE-2017-7533 Affected Products: SUSE Linux Enterprise Workstation Extension 12-SP2 SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 SUSE Linux Enterprise Server 12-SP2 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise High Availability 12-SP2 SUSE Linux Enterprise Desktop 12-SP2 SUSE Container as a Service Platform ALL OpenStack Cloud Magnum Orchestration 7 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The SUSE Linux Enterprise 12 SP2 kernel was updated to 4.4.74 to receive the following security update: - CVE-2017-7533: Bug in inotify code allowed privilege escalation (bnc#1049483). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Workstation Extension 12-SP2: zypper in -t patch SUSE-SLE-WE-12-SP2-2017-1251=1 - SUSE Linux Enterprise Software Development Kit 12-SP2: zypper in -t patch SUSE-SLE-SDK-12-SP2-2017-1251=1 - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2: zypper in -t patch SUSE-SLE-RPI-12-SP2-2017-1251=1 - SUSE Linux Enterprise Server 12-SP2: zypper in -t patch SUSE-SLE-SERVER-12-SP2-2017-1251=1 - SUSE Linux Enterprise Live Patching 12: zypper in -t patch SUSE-SLE-Live-Patching-12-2017-1251=1 - SUSE Linux Enterprise High Availability 12-SP2: zypper in -t patch SUSE-SLE-HA-12-SP2-2017-1251=1 - SUSE Linux Enterprise Desktop 12-SP2: zypper in -t patch SUSE-SLE-DESKTOP-12-SP2-2017-1251=1 - SUSE Container as a Service Platform ALL: zypper in -t patch SUSE-CAASP-ALL-2017-1251=1 - OpenStack Cloud Magnum Orchestration 7: zypper in -t patch SUSE-OpenStack-Cloud-Magnum-Orchestration-7-2017-1251=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Workstation Extension 12-SP2 (x86_64): kernel-default-debuginfo-4.4.74-92.32.1 kernel-default-debugsource-4.4.74-92.32.1 kernel-default-extra-4.4.74-92.32.1 kernel-default-extra-debuginfo-4.4.74-92.32.1 - SUSE Linux Enterprise Software Development Kit 12-SP2 (aarch64 ppc64le s390x x86_64): kernel-obs-build-4.4.74-92.32.1 kernel-obs-build-debugsource-4.4.74-92.32.1 - SUSE Linux Enterprise Software Development Kit 12-SP2 (noarch): kernel-docs-4.4.74-92.32.3 - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (aarch64): kernel-default-4.4.74-92.32.1 kernel-default-base-4.4.74-92.32.1 kernel-default-base-debuginfo-4.4.74-92.32.1 kernel-default-debuginfo-4.4.74-92.32.1 kernel-default-debugsource-4.4.74-92.32.1 kernel-default-devel-4.4.74-92.32.1 kernel-syms-4.4.74-92.32.1 - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (noarch): kernel-devel-4.4.74-92.32.1 kernel-macros-4.4.74-92.32.1 kernel-source-4.4.74-92.32.1 - SUSE Linux Enterprise Server 12-SP2 (aarch64 ppc64le s390x x86_64): kernel-default-4.4.74-92.32.1 kernel-default-base-4.4.74-92.32.1 kernel-default-base-debuginfo-4.4.74-92.32.1 kernel-default-debuginfo-4.4.74-92.32.1 kernel-default-debugsource-4.4.74-92.32.1 kernel-default-devel-4.4.74-92.32.1 kernel-syms-4.4.74-92.32.1 - SUSE Linux Enterprise Server 12-SP2 (noarch): kernel-devel-4.4.74-92.32.1 kernel-macros-4.4.74-92.32.1 kernel-source-4.4.74-92.32.1 - SUSE Linux Enterprise Server 12-SP2 (s390x): kernel-default-man-4.4.74-92.32.1 - SUSE Linux Enterprise Live Patching 12 (x86_64): kgraft-patch-4_4_74-92_32-default-1-2.1 - SUSE Linux Enterprise High Availability 12-SP2 (ppc64le s390x x86_64): cluster-md-kmp-default-4.4.74-92.32.1 cluster-md-kmp-default-debuginfo-4.4.74-92.32.1 cluster-network-kmp-default-4.4.74-92.32.1 cluster-network-kmp-default-debuginfo-4.4.74-92.32.1 dlm-kmp-default-4.4.74-92.32.1 dlm-kmp-default-debuginfo-4.4.74-92.32.1 gfs2-kmp-default-4.4.74-92.32.1 gfs2-kmp-default-debuginfo-4.4.74-92.32.1 kernel-default-debuginfo-4.4.74-92.32.1 kernel-default-debugsource-4.4.74-92.32.1 ocfs2-kmp-default-4.4.74-92.32.1 ocfs2-kmp-default-debuginfo-4.4.74-92.32.1 - SUSE Linux Enterprise Desktop 12-SP2 (noarch): kernel-devel-4.4.74-92.32.1 kernel-macros-4.4.74-92.32.1 kernel-source-4.4.74-92.32.1 - SUSE Linux Enterprise Desktop 12-SP2 (x86_64): kernel-default-4.4.74-92.32.1 kernel-default-debuginfo-4.4.74-92.32.1 kernel-default-debugsource-4.4.74-92.32.1 kernel-default-devel-4.4.74-92.32.1 kernel-default-extra-4.4.74-92.32.1 kernel-default-extra-debuginfo-4.4.74-92.32.1 kernel-syms-4.4.74-92.32.1 - SUSE Container as a Service Platform ALL (x86_64): kernel-default-4.4.74-92.32.1 kernel-default-debuginfo-4.4.74-92.32.1 kernel-default-debugsource-4.4.74-92.32.1 - OpenStack Cloud Magnum Orchestration 7 (x86_64): kernel-default-4.4.74-92.32.1 kernel-default-debuginfo-4.4.74-92.32.1 kernel-default-debugsource-4.4.74-92.32.1 References: https://www.suse.com/security/cve/CVE-2017-7533.html https://bugzilla.suse.com/1049483 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:2040-1: important: Security update for libzypp, zypper
by opensuse-security＠opensuse.org 03 Aug '17

03 Aug '17

SUSE Security Update: Security update for libzypp, zypper ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:2040-1 Rating: important References: #1009745 #1031756 #1033236 #1038132 #1038984 #1043218 #1045735 #1047785 #1048315 Cross-References: CVE-2017-7435 CVE-2017-7436 CVE-2017-9269 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 SUSE Linux Enterprise Server 12-SP2 SUSE Linux Enterprise Desktop 12-SP2 OpenStack Cloud Magnum Orchestration 7 ______________________________________________________________________________ An update that solves three vulnerabilities and has 6 fixes is now available. Description: The Software Update Stack was updated to receive fixes and enhancements. libzypp: Security issues fixed: - CVE-2017-7435, CVE-2017-7436, CVE-2017-9269: Fix GPG check workflows, mainly for unsigned repositories and packages. (bsc#1045735, bsc#1038984) Bug fixes: - Re-probe on refresh if the repository type changes. (bsc#1048315) - Propagate proper error code to DownloadProgressReport. (bsc#1047785) - Allow to trigger an appdata refresh unconditionally. (bsc#1009745) - Support custom repo variables defined in /etc/zypp/vars.d. - Adapt loop mounting of ISO images. (bsc#1038132, bsc#1033236) - Fix potential crash if repository has no baseurl. (bsc#1043218) zypper: - Adapt download callback to report and handle unsigned packages. (bsc#1038984) - Report missing/optional files as 'not found' rather than 'error'. (bsc#1047785) - Document support for custom repository variables defined in /etc/zypp/vars.d. - Emphasize that it depends on how fast PackageKit will respond to a 'quit' request sent if PK blocks package management. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP2: zypper in -t patch SUSE-SLE-SDK-12-SP2-2017-1252=1 - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2: zypper in -t patch SUSE-SLE-RPI-12-SP2-2017-1252=1 - SUSE Linux Enterprise Server 12-SP2: zypper in -t patch SUSE-SLE-SERVER-12-SP2-2017-1252=1 - SUSE Linux Enterprise Desktop 12-SP2: zypper in -t patch SUSE-SLE-DESKTOP-12-SP2-2017-1252=1 - OpenStack Cloud Magnum Orchestration 7: zypper in -t patch SUSE-OpenStack-Cloud-Magnum-Orchestration-7-2017-1252=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12-SP2 (aarch64 ppc64le s390x x86_64): libzypp-debuginfo-16.15.2-27.21.1 libzypp-debugsource-16.15.2-27.21.1 libzypp-devel-16.15.2-27.21.1 libzypp-devel-doc-16.15.2-27.21.1 - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (aarch64): libzypp-16.15.2-27.21.1 libzypp-debuginfo-16.15.2-27.21.1 libzypp-debugsource-16.15.2-27.21.1 zypper-1.13.30-18.13.3 zypper-debuginfo-1.13.30-18.13.3 zypper-debugsource-1.13.30-18.13.3 - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (noarch): zypper-log-1.13.30-18.13.3 - SUSE Linux Enterprise Server 12-SP2 (aarch64 ppc64le s390x x86_64): libzypp-16.15.2-27.21.1 libzypp-debuginfo-16.15.2-27.21.1 libzypp-debugsource-16.15.2-27.21.1 zypper-1.13.30-18.13.3 zypper-debuginfo-1.13.30-18.13.3 zypper-debugsource-1.13.30-18.13.3 - SUSE Linux Enterprise Server 12-SP2 (noarch): zypper-log-1.13.30-18.13.3 - SUSE Linux Enterprise Desktop 12-SP2 (x86_64): libzypp-16.15.2-27.21.1 libzypp-debuginfo-16.15.2-27.21.1 libzypp-debugsource-16.15.2-27.21.1 zypper-1.13.30-18.13.3 zypper-debuginfo-1.13.30-18.13.3 zypper-debugsource-1.13.30-18.13.3 - SUSE Linux Enterprise Desktop 12-SP2 (noarch): zypper-log-1.13.30-18.13.3 - OpenStack Cloud Magnum Orchestration 7 (x86_64): libzypp-16.15.2-27.21.1 libzypp-debuginfo-16.15.2-27.21.1 libzypp-debugsource-16.15.2-27.21.1 zypper-1.13.30-18.13.3 zypper-debuginfo-1.13.30-18.13.3 zypper-debugsource-1.13.30-18.13.3 References: https://www.suse.com/security/cve/CVE-2017-7435.html https://www.suse.com/security/cve/CVE-2017-7436.html https://www.suse.com/security/cve/CVE-2017-9269.html https://bugzilla.suse.com/1009745 https://bugzilla.suse.com/1031756 https://bugzilla.suse.com/1033236 https://bugzilla.suse.com/1038132 https://bugzilla.suse.com/1038984 https://bugzilla.suse.com/1043218 https://bugzilla.suse.com/1045735 https://bugzilla.suse.com/1047785 https://bugzilla.suse.com/1048315 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:2035-1: important: Security update for mariadb
by opensuse-security＠opensuse.org 03 Aug '17

03 Aug '17

SUSE Security Update: Security update for mariadb ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:2035-1 Rating: important References: #1048715 #963041 Cross-References: CVE-2017-3308 CVE-2017-3309 CVE-2017-3453 CVE-2017-3456 CVE-2017-3464 Affected Products: SUSE OpenStack Cloud 6 SUSE Linux Enterprise Workstation Extension 12-SP3 SUSE Linux Enterprise Workstation Extension 12-SP2 SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server for SAP 12-SP1 SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP2 SUSE Linux Enterprise Server 12-SP1-LTSS SUSE Linux Enterprise Desktop 12-SP3 SUSE Linux Enterprise Desktop 12-SP2 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This MariaDB update to version 10.0.31 GA fixes the following issues: Security issues fixed: - CVE-2017-3308: Subcomponent: Server: DML: Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS). (bsc#1048715) - CVE-2017-3309: Subcomponent: Server: Optimizer: Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS). (bsc#1048715) - CVE-2017-3453: Subcomponent: Server: Optimizer: Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS). (bsc#1048715) - CVE-2017-3456: Subcomponent: Server: DML: Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS). (bsc#1048715) - CVE-2017-3464: Subcomponent: Server: DDL: Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS). (bsc#1048715) Bug fixes: - switch from 'Restart=on-failure' to 'Restart=on-abort' in mysql.service in order to follow the upstream. It also fixes hanging mysql-systemd-helper when mariadb fails (e.g. because of the misconfiguration) (bsc#963041) - XtraDB updated to 5.6.36-82.0 - TokuDB updated to 5.6.36-82.0 - Innodb updated to 5.6.36 - Performance Schema updated to 5.6.36 Release notes and changelog: - https://kb.askmonty.org/en/mariadb-10031-release-notes - https://kb.askmonty.org/en/mariadb-10031-changelog Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud 6: zypper in -t patch SUSE-OpenStack-Cloud-6-2017-1247=1 - SUSE Linux Enterprise Workstation Extension 12-SP3: zypper in -t patch SUSE-SLE-WE-12-SP3-2017-1247=1 - SUSE Linux Enterprise Workstation Extension 12-SP2: zypper in -t patch SUSE-SLE-WE-12-SP2-2017-1247=1 - SUSE Linux Enterprise Software Development Kit 12-SP3: zypper in -t patch SUSE-SLE-SDK-12-SP3-2017-1247=1 - SUSE Linux Enterprise Software Development Kit 12-SP2: zypper in -t patch SUSE-SLE-SDK-12-SP2-2017-1247=1 - SUSE Linux Enterprise Server for SAP 12-SP1: zypper in -t patch SUSE-SLE-SAP-12-SP1-2017-1247=1 - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2: zypper in -t patch SUSE-SLE-RPI-12-SP2-2017-1247=1 - SUSE Linux Enterprise Server 12-SP3: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2017-1247=1 - SUSE Linux Enterprise Server 12-SP2: zypper in -t patch SUSE-SLE-SERVER-12-SP2-2017-1247=1 - SUSE Linux Enterprise Server 12-SP1-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2017-1247=1 - SUSE Linux Enterprise Desktop 12-SP3: zypper in -t patch SUSE-SLE-DESKTOP-12-SP3-2017-1247=1 - SUSE Linux Enterprise Desktop 12-SP2: zypper in -t patch SUSE-SLE-DESKTOP-12-SP2-2017-1247=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE OpenStack Cloud 6 (x86_64): libmysqlclient-devel-10.0.31-29.3.1 libmysqlclient18-10.0.31-29.3.1 libmysqlclient18-32bit-10.0.31-29.3.1 libmysqlclient18-debuginfo-10.0.31-29.3.1 libmysqlclient18-debuginfo-32bit-10.0.31-29.3.1 libmysqlclient_r18-10.0.31-29.3.1 libmysqld-devel-10.0.31-29.3.1 libmysqld18-10.0.31-29.3.1 libmysqld18-debuginfo-10.0.31-29.3.1 mariadb-10.0.31-29.3.1 mariadb-client-10.0.31-29.3.1 mariadb-client-debuginfo-10.0.31-29.3.1 mariadb-debuginfo-10.0.31-29.3.1 mariadb-debugsource-10.0.31-29.3.1 mariadb-errormessages-10.0.31-29.3.1 mariadb-tools-10.0.31-29.3.1 mariadb-tools-debuginfo-10.0.31-29.3.1 - SUSE Linux Enterprise Workstation Extension 12-SP3 (x86_64): libmysqlclient_r18-10.0.31-29.3.1 libmysqlclient_r18-32bit-10.0.31-29.3.1 mariadb-debuginfo-10.0.31-29.3.1 mariadb-debugsource-10.0.31-29.3.1 - SUSE Linux Enterprise Workstation Extension 12-SP2 (x86_64): libmysqlclient_r18-10.0.31-29.3.1 libmysqlclient_r18-32bit-10.0.31-29.3.1 mariadb-debuginfo-10.0.31-29.3.1 mariadb-debugsource-10.0.31-29.3.1 - SUSE Linux Enterprise Software Development Kit 12-SP3 (aarch64 ppc64le s390x x86_64): libmysqlclient-devel-10.0.31-29.3.1 libmysqlclient_r18-10.0.31-29.3.1 libmysqld-devel-10.0.31-29.3.1 libmysqld18-10.0.31-29.3.1 libmysqld18-debuginfo-10.0.31-29.3.1 mariadb-debuginfo-10.0.31-29.3.1 mariadb-debugsource-10.0.31-29.3.1 - SUSE Linux Enterprise Software Development Kit 12-SP2 (aarch64 ppc64le s390x x86_64): libmysqlclient-devel-10.0.31-29.3.1 libmysqlclient_r18-10.0.31-29.3.1 libmysqld-devel-10.0.31-29.3.1 libmysqld18-10.0.31-29.3.1 libmysqld18-debuginfo-10.0.31-29.3.1 mariadb-debuginfo-10.0.31-29.3.1 mariadb-debugsource-10.0.31-29.3.1 - SUSE Linux Enterprise Server for SAP 12-SP1 (ppc64le x86_64): libmysqlclient-devel-10.0.31-29.3.1 libmysqlclient18-10.0.31-29.3.1 libmysqlclient18-debuginfo-10.0.31-29.3.1 libmysqlclient_r18-10.0.31-29.3.1 libmysqld-devel-10.0.31-29.3.1 libmysqld18-10.0.31-29.3.1 libmysqld18-debuginfo-10.0.31-29.3.1 mariadb-10.0.31-29.3.1 mariadb-client-10.0.31-29.3.1 mariadb-client-debuginfo-10.0.31-29.3.1 mariadb-debuginfo-10.0.31-29.3.1 mariadb-debugsource-10.0.31-29.3.1 mariadb-errormessages-10.0.31-29.3.1 mariadb-tools-10.0.31-29.3.1 mariadb-tools-debuginfo-10.0.31-29.3.1 - SUSE Linux Enterprise Server for SAP 12-SP1 (x86_64): libmysqlclient18-32bit-10.0.31-29.3.1 libmysqlclient18-debuginfo-32bit-10.0.31-29.3.1 - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (aarch64): libmysqlclient18-10.0.31-29.3.1 libmysqlclient18-debuginfo-10.0.31-29.3.1 mariadb-10.0.31-29.3.1 mariadb-client-10.0.31-29.3.1 mariadb-client-debuginfo-10.0.31-29.3.1 mariadb-debuginfo-10.0.31-29.3.1 mariadb-debugsource-10.0.31-29.3.1 mariadb-errormessages-10.0.31-29.3.1 mariadb-tools-10.0.31-29.3.1 mariadb-tools-debuginfo-10.0.31-29.3.1 - SUSE Linux Enterprise Server 12-SP3 (aarch64 ppc64le s390x x86_64): libmysqlclient18-10.0.31-29.3.1 libmysqlclient18-debuginfo-10.0.31-29.3.1 mariadb-10.0.31-29.3.1 mariadb-client-10.0.31-29.3.1 mariadb-client-debuginfo-10.0.31-29.3.1 mariadb-debuginfo-10.0.31-29.3.1 mariadb-debugsource-10.0.31-29.3.1 mariadb-errormessages-10.0.31-29.3.1 mariadb-tools-10.0.31-29.3.1 mariadb-tools-debuginfo-10.0.31-29.3.1 - SUSE Linux Enterprise Server 12-SP3 (s390x x86_64): libmysqlclient18-32bit-10.0.31-29.3.1 libmysqlclient18-debuginfo-32bit-10.0.31-29.3.1 - SUSE Linux Enterprise Server 12-SP2 (aarch64 ppc64le s390x x86_64): libmysqlclient18-10.0.31-29.3.1 libmysqlclient18-debuginfo-10.0.31-29.3.1 mariadb-10.0.31-29.3.1 mariadb-client-10.0.31-29.3.1 mariadb-client-debuginfo-10.0.31-29.3.1 mariadb-debuginfo-10.0.31-29.3.1 mariadb-debugsource-10.0.31-29.3.1 mariadb-errormessages-10.0.31-29.3.1 mariadb-tools-10.0.31-29.3.1 mariadb-tools-debuginfo-10.0.31-29.3.1 - SUSE Linux Enterprise Server 12-SP2 (s390x x86_64): libmysqlclient18-32bit-10.0.31-29.3.1 libmysqlclient18-debuginfo-32bit-10.0.31-29.3.1 - SUSE Linux Enterprise Server 12-SP1-LTSS (ppc64le s390x x86_64): libmysqlclient-devel-10.0.31-29.3.1 libmysqlclient18-10.0.31-29.3.1 libmysqlclient18-debuginfo-10.0.31-29.3.1 libmysqlclient_r18-10.0.31-29.3.1 libmysqld-devel-10.0.31-29.3.1 libmysqld18-10.0.31-29.3.1 libmysqld18-debuginfo-10.0.31-29.3.1 mariadb-10.0.31-29.3.1 mariadb-client-10.0.31-29.3.1 mariadb-client-debuginfo-10.0.31-29.3.1 mariadb-debuginfo-10.0.31-29.3.1 mariadb-debugsource-10.0.31-29.3.1 mariadb-errormessages-10.0.31-29.3.1 mariadb-tools-10.0.31-29.3.1 mariadb-tools-debuginfo-10.0.31-29.3.1 - SUSE Linux Enterprise Server 12-SP1-LTSS (s390x x86_64): libmysqlclient18-32bit-10.0.31-29.3.1 libmysqlclient18-debuginfo-32bit-10.0.31-29.3.1 - SUSE Linux Enterprise Desktop 12-SP3 (x86_64): libmysqlclient18-10.0.31-29.3.1 libmysqlclient18-32bit-10.0.31-29.3.1 libmysqlclient18-debuginfo-10.0.31-29.3.1 libmysqlclient18-debuginfo-32bit-10.0.31-29.3.1 libmysqlclient_r18-10.0.31-29.3.1 libmysqlclient_r18-32bit-10.0.31-29.3.1 mariadb-10.0.31-29.3.1 mariadb-client-10.0.31-29.3.1 mariadb-client-debuginfo-10.0.31-29.3.1 mariadb-debuginfo-10.0.31-29.3.1 mariadb-debugsource-10.0.31-29.3.1 mariadb-errormessages-10.0.31-29.3.1 - SUSE Linux Enterprise Desktop 12-SP2 (x86_64): libmysqlclient18-10.0.31-29.3.1 libmysqlclient18-32bit-10.0.31-29.3.1 libmysqlclient18-debuginfo-10.0.31-29.3.1 libmysqlclient18-debuginfo-32bit-10.0.31-29.3.1 libmysqlclient_r18-10.0.31-29.3.1 libmysqlclient_r18-32bit-10.0.31-29.3.1 mariadb-10.0.31-29.3.1 mariadb-client-10.0.31-29.3.1 mariadb-client-debuginfo-10.0.31-29.3.1 mariadb-debuginfo-10.0.31-29.3.1 mariadb-debugsource-10.0.31-29.3.1 mariadb-errormessages-10.0.31-29.3.1 References: https://www.suse.com/security/cve/CVE-2017-3308.html https://www.suse.com/security/cve/CVE-2017-3309.html https://www.suse.com/security/cve/CVE-2017-3453.html https://www.suse.com/security/cve/CVE-2017-3456.html https://www.suse.com/security/cve/CVE-2017-3464.html https://bugzilla.suse.com/1048715 https://bugzilla.suse.com/963041 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:2034-1: important: Security update for mariadb
by opensuse-security＠opensuse.org 03 Aug '17

03 Aug '17

SUSE Security Update: Security update for mariadb ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:2034-1 Rating: important References: #1048715 Cross-References: CVE-2017-3308 CVE-2017-3309 CVE-2017-3453 CVE-2017-3456 CVE-2017-3464 Affected Products: SUSE Linux Enterprise Server for SAP 12 SUSE Linux Enterprise Server 12-LTSS ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This MariaDB update to version 10.0.31 GA fixes the following issues: Security issues fixed: - CVE-2017-3308: Subcomponent: Server: DML: Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS). (bsc#1048715) - CVE-2017-3309: Subcomponent: Server: Optimizer: Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS). (bsc#1048715) - CVE-2017-3453: Subcomponent: Server: Optimizer: Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS). (bsc#1048715) - CVE-2017-3456: Subcomponent: Server: DML: Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS). (bsc#1048715) - CVE-2017-3464: Subcomponent: Server: DDL: Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS). (bsc#1048715) Bug fixes: - XtraDB updated to 5.6.36-82.0 - TokuDB updated to 5.6.36-82.0 - Innodb updated to 5.6.36 - Performance Schema updated to 5.6.36 Release notes and changelog: - https://kb.askmonty.org/en/mariadb-10031-release-notes - https://kb.askmonty.org/en/mariadb-10031-changelog Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for SAP 12: zypper in -t patch SUSE-SLE-SAP-12-2017-1244=1 - SUSE Linux Enterprise Server 12-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-2017-1244=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server for SAP 12 (x86_64): libmysqlclient-devel-10.0.31-20.29.1 libmysqlclient18-10.0.31-20.29.1 libmysqlclient18-32bit-10.0.31-20.29.1 libmysqlclient18-debuginfo-10.0.31-20.29.1 libmysqlclient18-debuginfo-32bit-10.0.31-20.29.1 libmysqlclient_r18-10.0.31-20.29.1 libmysqld-devel-10.0.31-20.29.1 libmysqld18-10.0.31-20.29.1 libmysqld18-debuginfo-10.0.31-20.29.1 mariadb-10.0.31-20.29.1 mariadb-client-10.0.31-20.29.1 mariadb-client-debuginfo-10.0.31-20.29.1 mariadb-debuginfo-10.0.31-20.29.1 mariadb-debugsource-10.0.31-20.29.1 mariadb-errormessages-10.0.31-20.29.1 mariadb-tools-10.0.31-20.29.1 mariadb-tools-debuginfo-10.0.31-20.29.1 - SUSE Linux Enterprise Server 12-LTSS (ppc64le s390x x86_64): libmysqlclient-devel-10.0.31-20.29.1 libmysqlclient18-10.0.31-20.29.1 libmysqlclient18-debuginfo-10.0.31-20.29.1 libmysqlclient_r18-10.0.31-20.29.1 libmysqld-devel-10.0.31-20.29.1 libmysqld18-10.0.31-20.29.1 libmysqld18-debuginfo-10.0.31-20.29.1 mariadb-10.0.31-20.29.1 mariadb-client-10.0.31-20.29.1 mariadb-client-debuginfo-10.0.31-20.29.1 mariadb-debuginfo-10.0.31-20.29.1 mariadb-debugsource-10.0.31-20.29.1 mariadb-errormessages-10.0.31-20.29.1 mariadb-tools-10.0.31-20.29.1 mariadb-tools-debuginfo-10.0.31-20.29.1 - SUSE Linux Enterprise Server 12-LTSS (s390x x86_64): libmysqlclient18-32bit-10.0.31-20.29.1 libmysqlclient18-debuginfo-32bit-10.0.31-20.29.1 References: https://www.suse.com/security/cve/CVE-2017-3308.html https://www.suse.com/security/cve/CVE-2017-3309.html https://www.suse.com/security/cve/CVE-2017-3453.html https://www.suse.com/security/cve/CVE-2017-3456.html https://www.suse.com/security/cve/CVE-2017-3464.html https://bugzilla.suse.com/1048715 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0