June 2018 - openSUSE Security Announce

[security-announce] openSUSE-SU-2018:1561-1: important: Security update for ocaml
by opensuse-security＠opensuse.org 06 Jun '18

06 Jun '18

openSUSE Security Update: Security update for ocaml ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1561-1 Rating: important References: #1088591 Cross-References: CVE-2018-9838 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ocaml fixes the following issues: - CVE-2018-9838: The caml_ba_deserialize function in byterun/bigarray.c in the standard library had an integer overflow which, in situations where marshalled data is accepted from an untrusted source, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted object. [bsc#1088591] This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-559=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ocaml-4.03.0-4.6.1 ocaml-compiler-libs-4.03.0-4.6.1 ocaml-compiler-libs-devel-4.03.0-4.6.1 ocaml-debuginfo-4.03.0-4.6.1 ocaml-debugsource-4.03.0-4.6.1 ocaml-docs-4.03.0-4.6.1 ocaml-emacs-4.03.0-4.6.1 ocaml-ocamldoc-4.03.0-4.6.1 ocaml-ocamldoc-debuginfo-4.03.0-4.6.1 ocaml-rpm-macros-4.03.0-4.6.1 ocaml-runtime-4.03.0-4.6.1 ocaml-runtime-debuginfo-4.03.0-4.6.1 ocaml-source-4.03.0-4.6.1 ocaml-x11-4.03.0-4.6.1 References: https://www.suse.com/security/cve/CVE-2018-9838.html https://bugzilla.suse.com/1088591 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:1560-1: moderate: Security update for dpdk-thunderxdpdk
by opensuse-security＠opensuse.org 06 Jun '18

06 Jun '18

openSUSE Security Update: Security update for dpdk-thunderxdpdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1560-1 Rating: moderate References: #1089638 Cross-References: CVE-2018-1059 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes the following issues: - CVE-2018-1059: The DPDK vhost-user interface did not check to verify that all the requested guest physical range was mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may have lead to a malicious guest exposing vhost-user backend process memory (bsc#1089638). This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-558=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): dpdk-16.11.6-6.5.1 dpdk-debuginfo-16.11.6-6.5.1 dpdk-debugsource-16.11.6-6.5.1 dpdk-devel-16.11.6-6.5.1 dpdk-devel-debuginfo-16.11.6-6.5.1 dpdk-examples-16.11.6-6.5.1 dpdk-examples-debuginfo-16.11.6-6.5.1 dpdk-tools-16.11.6-6.5.1 - openSUSE Leap 42.3 (x86_64): dpdk-kmp-default-16.11.6_k4.4.132_53-6.5.1 dpdk-kmp-default-debuginfo-16.11.6_k4.4.132_53-6.5.1 - openSUSE Leap 42.3 (noarch): dpdk-doc-16.11.6-6.5.1 References: https://www.suse.com/security/cve/CVE-2018-1059.html https://bugzilla.suse.com/1089638 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:1553-1: important: Security update for git
by opensuse-security＠opensuse.org 06 Jun '18

06 Jun '18

openSUSE Security Update: Security update for git ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1553-1 Rating: important References: #1095218 #1095219 Cross-References: CVE-2018-11233 CVE-2018-11235 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for fixes the following security issues: * path sanity-checks on NTFS can read arbitrary memory (CVE-2018-11233, boo#1095218) * arbitrary code execution when recursively cloning a malicious repository (CVE-2018-11235, boo#1095219) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-557=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-557=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): git-2.13.7-13.1 git-arch-2.13.7-13.1 git-core-2.13.7-13.1 git-core-debuginfo-2.13.7-13.1 git-credential-gnome-keyring-2.13.7-13.1 git-credential-gnome-keyring-debuginfo-2.13.7-13.1 git-cvs-2.13.7-13.1 git-daemon-2.13.7-13.1 git-daemon-debuginfo-2.13.7-13.1 git-debugsource-2.13.7-13.1 git-email-2.13.7-13.1 git-gui-2.13.7-13.1 git-svn-2.13.7-13.1 git-svn-debuginfo-2.13.7-13.1 git-web-2.13.7-13.1 gitk-2.13.7-13.1 - openSUSE Leap 42.3 (noarch): git-doc-2.13.7-13.1 - openSUSE Leap 15.0 (i586 x86_64): git-2.16.4-lp150.2.3.1 git-arch-2.16.4-lp150.2.3.1 git-core-2.16.4-lp150.2.3.1 git-core-debuginfo-2.16.4-lp150.2.3.1 git-credential-gnome-keyring-2.16.4-lp150.2.3.1 git-credential-gnome-keyring-debuginfo-2.16.4-lp150.2.3.1 git-credential-libsecret-2.16.4-lp150.2.3.1 git-credential-libsecret-debuginfo-2.16.4-lp150.2.3.1 git-cvs-2.16.4-lp150.2.3.1 git-daemon-2.16.4-lp150.2.3.1 git-daemon-debuginfo-2.16.4-lp150.2.3.1 git-debuginfo-2.16.4-lp150.2.3.1 git-debugsource-2.16.4-lp150.2.3.1 git-email-2.16.4-lp150.2.3.1 git-gui-2.16.4-lp150.2.3.1 git-p4-2.16.4-lp150.2.3.1 git-svn-2.16.4-lp150.2.3.1 git-svn-debuginfo-2.16.4-lp150.2.3.1 git-web-2.16.4-lp150.2.3.1 gitk-2.16.4-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): git-doc-2.16.4-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-11233.html https://www.suse.com/security/cve/CVE-2018-11235.html https://bugzilla.suse.com/1095218 https://bugzilla.suse.com/1095219 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:1502-1: moderate: Security update for kernel modules
by opensuse-security＠opensuse.org 05 Jun '18

05 Jun '18

openSUSE Security Update: Security update for kernel modules ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1502-1 Rating: moderate References: #1068032 Cross-References: CVE-2017-5715 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update provides rebuilt kernel modules for openSUSE Leap 42.3 with retpoline enablement to address Spectre Variant 2 (CVE-2017-5715 bsc#1068032). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-551=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): crash-7.1.8-8.1 crash-debuginfo-7.1.8-8.1 crash-debugsource-7.1.8-8.1 crash-devel-7.1.8-8.1 crash-doc-7.1.8-8.1 crash-eppic-7.1.8-8.1 crash-eppic-debuginfo-7.1.8-8.1 crash-gcore-7.1.8-8.1 crash-gcore-debuginfo-7.1.8-8.1 - openSUSE Leap 42.3 (noarch): ftsteutates-sensors-20160601-4.4.1 - openSUSE Leap 42.3 (x86_64): bbswitch-0.8-12.4.1 bbswitch-debugsource-0.8-12.4.1 bbswitch-kmp-default-0.8_k4.4.132_53-12.4.1 bbswitch-kmp-default-debuginfo-0.8_k4.4.132_53-12.4.1 crash-kmp-default-7.1.8_k4.4.132_53-8.1 crash-kmp-default-debuginfo-7.1.8_k4.4.132_53-8.1 ftsteutates-debugsource-20160601-4.4.1 ftsteutates-kmp-default-20160601_k4.4.132_53-4.4.1 ftsteutates-kmp-default-debuginfo-20160601_k4.4.132_53-4.4.1 hdjmod-debugsource-1.28-27.4.1 hdjmod-kmp-default-1.28_k4.4.132_53-27.4.1 hdjmod-kmp-default-debuginfo-1.28_k4.4.132_53-27.4.1 ipset-6.29-4.4.1 ipset-debuginfo-6.29-4.4.1 ipset-debugsource-6.29-4.4.1 ipset-devel-6.29-4.4.1 ipset-kmp-default-6.29_k4.4.132_53-4.4.1 ipset-kmp-default-debuginfo-6.29_k4.4.132_53-4.4.1 libipset3-6.29-4.4.1 libipset3-debuginfo-6.29-4.4.1 lttng-modules-2.7.1-6.2.1 lttng-modules-debugsource-2.7.1-6.2.1 lttng-modules-kmp-default-2.7.1_k4.4.132_53-6.2.1 lttng-modules-kmp-default-debuginfo-2.7.1_k4.4.132_53-6.2.1 ndiswrapper-1.59-3.4.1 ndiswrapper-debuginfo-1.59-3.4.1 ndiswrapper-debugsource-1.59-3.4.1 ndiswrapper-kmp-default-1.59_k4.4.132_53-3.4.1 ndiswrapper-kmp-default-debuginfo-1.59_k4.4.132_53-3.4.1 pcfclock-0.44-272.4.1 pcfclock-debuginfo-0.44-272.4.1 pcfclock-debugsource-0.44-272.4.1 pcfclock-kmp-default-0.44_k4.4.132_53-272.4.1 pcfclock-kmp-default-debuginfo-0.44_k4.4.132_53-272.4.1 sysdig-0.17.0-12.1 sysdig-debuginfo-0.17.0-12.1 sysdig-debugsource-0.17.0-12.1 sysdig-kmp-default-0.17.0_k4.4.132_53-12.1 sysdig-kmp-default-debuginfo-0.17.0_k4.4.132_53-12.1 vhba-kmp-debugsource-20161009-9.4.1 vhba-kmp-default-20161009_k4.4.132_53-9.4.1 vhba-kmp-default-debuginfo-20161009_k4.4.132_53-9.4.1 xtables-addons-2.11-4.4.1 xtables-addons-debuginfo-2.11-4.4.1 xtables-addons-debugsource-2.11-4.4.1 xtables-addons-kmp-default-2.11_k4.4.132_53-4.4.1 xtables-addons-kmp-default-debuginfo-2.11_k4.4.132_53-4.4.1 References: https://www.suse.com/security/cve/CVE-2017-5715.html https://bugzilla.suse.com/1068032 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:1487-1: important: Security update for xen
by opensuse-security＠opensuse.org 01 Jun '18

01 Jun '18

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1487-1 Rating: important References: #1027519 #1074562 #1090296 #1090822 #1090823 #1092631 Cross-References: CVE-2018-10981 CVE-2018-10982 CVE-2018-3639 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves three vulnerabilities and has three fixes is now available. Description: This update for xen fixes the following issues: Security issues fixed: - CVE-2018-3639: Spectre V4 – Speculative Store Bypass aka "Memory Disambiguation" (bsc#1092631) This feature can be controlled by the "ssbd=on/off" commandline flag for the XEN hypervisor. - CVE-2018-10982: x86 vHPET interrupt injection errors (XSA-261 bsc#1090822) - CVE-2018-10981: qemu may drive Xen into unbounded loop (XSA-262 bsc#1090823) Other bugfixes: - Upstream patches from Jan (bsc#1027519) - additional fixes related to Page Table Isolation (XPTI). (bsc#1074562 XSA-254) - qemu-system-i386 cannot handle more than 4 HW NICs (bsc#1090296) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-547=1 Package List: - openSUSE Leap 42.3 (x86_64): xen-4.9.2_06-22.1 xen-debugsource-4.9.2_06-22.1 xen-devel-4.9.2_06-22.1 xen-doc-html-4.9.2_06-22.1 xen-libs-4.9.2_06-22.1 xen-libs-debuginfo-4.9.2_06-22.1 xen-tools-4.9.2_06-22.1 xen-tools-debuginfo-4.9.2_06-22.1 xen-tools-domU-4.9.2_06-22.1 xen-tools-domU-debuginfo-4.9.2_06-22.1 References: https://www.suse.com/security/cve/CVE-2018-10981.html https://www.suse.com/security/cve/CVE-2018-10982.html https://www.suse.com/security/cve/CVE-2018-3639.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1074562 https://bugzilla.suse.com/1090296 https://bugzilla.suse.com/1090822 https://bugzilla.suse.com/1090823 https://bugzilla.suse.com/1092631 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:1485-1: important: Security update for chromium
by opensuse-security＠opensuse.org 01 Jun '18

01 Jun '18

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1485-1 Rating: important References: #1095163 Cross-References: CVE-2018-6123 CVE-2018-6124 CVE-2018-6125 CVE-2018-6126 CVE-2018-6127 CVE-2018-6128 CVE-2018-6129 CVE-2018-6130 CVE-2018-6131 CVE-2018-6132 CVE-2018-6133 CVE-2018-6134 CVE-2018-6135 CVE-2018-6136 CVE-2018-6137 CVE-2018-6138 CVE-2018-6139 CVE-2018-6140 CVE-2018-6141 CVE-2018-6142 CVE-2018-6143 CVE-2018-6144 CVE-2018-6145 CVE-2018-6147 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 24 vulnerabilities is now available. Description: This update for chromium to version 66.0.3359.181 fixes the following issues: The following security issues were fixed (boo#1095163): * CVE-2018-6123: Use after free in Blink. * CVE-2018-6124: Type confusion in Blink. * CVE-2018-6125: Overly permissive policy in WebUSB. * CVE-2018-6126: Heap buffer overflow in Skia. * CVE-2018-6127: Use after free in indexedDB. * CVE-2018-6128: uXSS in Chrome on iOS. * CVE-2018-6129: Out of bounds memory access in WebRTC. * CVE-2018-6130: Out of bounds memory access in WebRTC. * CVE-2018-6131: Incorrect mutability protection in WebAssembly. * CVE-2018-6132: Use of uninitialized memory in WebRTC. * CVE-2018-6133: URL spoof in Omnibox. * CVE-2018-6134: Referrer Policy bypass in Blink. * CVE-2018-6135: UI spoofing in Blink. * CVE-2018-6136: Out of bounds memory access in V8. * CVE-2018-6137: Leak of visited status of page in Blink. * CVE-2018-6138: Overly permissive policy in Extensions. * CVE-2018-6139: Restrictions bypass in the debugger extension API. * CVE-2018-6140: Restrictions bypass in the debugger extension API. * CVE-2018-6141: Heap buffer overflow in Skia. * CVE-2018-6142: Out of bounds memory access in V8. * CVE-2018-6143: Out of bounds memory access in V8. * CVE-2018-6144: Out of bounds memory access in PDFium. * CVE-2018-6145: Incorrect escaping of MathML in Blink. * CVE-2018-6147: Password fields not taking advantage of OS protections in Views. Additional changes: * Autoplay: Force enable on desktop for Web Audio This update enables the "Strict site isolation" feature for a larger percentage of users. This feature is a mitigation against the Spectre vulnerabilities. It can be turned on via: chrome://flags/#enable-site-per-process It can be disabled via: chrome://flags/#site-isolation-trial-opt-out Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-546=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-67.0.3396.62-58.1 chromedriver-debuginfo-67.0.3396.62-58.1 chromium-67.0.3396.62-58.1 chromium-debuginfo-67.0.3396.62-58.1 chromium-debugsource-67.0.3396.62-58.1 References: https://www.suse.com/security/cve/CVE-2018-6123.html https://www.suse.com/security/cve/CVE-2018-6124.html https://www.suse.com/security/cve/CVE-2018-6125.html https://www.suse.com/security/cve/CVE-2018-6126.html https://www.suse.com/security/cve/CVE-2018-6127.html https://www.suse.com/security/cve/CVE-2018-6128.html https://www.suse.com/security/cve/CVE-2018-6129.html https://www.suse.com/security/cve/CVE-2018-6130.html https://www.suse.com/security/cve/CVE-2018-6131.html https://www.suse.com/security/cve/CVE-2018-6132.html https://www.suse.com/security/cve/CVE-2018-6133.html https://www.suse.com/security/cve/CVE-2018-6134.html https://www.suse.com/security/cve/CVE-2018-6135.html https://www.suse.com/security/cve/CVE-2018-6136.html https://www.suse.com/security/cve/CVE-2018-6137.html https://www.suse.com/security/cve/CVE-2018-6138.html https://www.suse.com/security/cve/CVE-2018-6139.html https://www.suse.com/security/cve/CVE-2018-6140.html https://www.suse.com/security/cve/CVE-2018-6141.html https://www.suse.com/security/cve/CVE-2018-6142.html https://www.suse.com/security/cve/CVE-2018-6143.html https://www.suse.com/security/cve/CVE-2018-6144.html https://www.suse.com/security/cve/CVE-2018-6145.html https://www.suse.com/security/cve/CVE-2018-6147.html https://bugzilla.suse.com/1095163 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:1484-1: important: Security update for chromium
by opensuse-security＠opensuse.org 01 Jun '18

01 Jun '18

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1484-1 Rating: important References: #1095163 Cross-References: CVE-2018-6123 CVE-2018-6124 CVE-2018-6125 CVE-2018-6126 CVE-2018-6127 CVE-2018-6128 CVE-2018-6129 CVE-2018-6130 CVE-2018-6131 CVE-2018-6132 CVE-2018-6133 CVE-2018-6134 CVE-2018-6135 CVE-2018-6136 CVE-2018-6137 CVE-2018-6138 CVE-2018-6139 CVE-2018-6140 CVE-2018-6141 CVE-2018-6142 CVE-2018-6143 CVE-2018-6144 CVE-2018-6145 CVE-2018-6147 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 24 vulnerabilities is now available. Description: This update for chromium to version 66.0.3359.181 fixes the following issues: The following security issues were fixed (boo#1095163): * CVE-2018-6123: Use after free in Blink. * CVE-2018-6124: Type confusion in Blink. * CVE-2018-6125: Overly permissive policy in WebUSB. * CVE-2018-6126: Heap buffer overflow in Skia. * CVE-2018-6127: Use after free in indexedDB. * CVE-2018-6128: uXSS in Chrome on iOS. * CVE-2018-6129: Out of bounds memory access in WebRTC. * CVE-2018-6130: Out of bounds memory access in WebRTC. * CVE-2018-6131: Incorrect mutability protection in WebAssembly. * CVE-2018-6132: Use of uninitialized memory in WebRTC. * CVE-2018-6133: URL spoof in Omnibox. * CVE-2018-6134: Referrer Policy bypass in Blink. * CVE-2018-6135: UI spoofing in Blink. * CVE-2018-6136: Out of bounds memory access in V8. * CVE-2018-6137: Leak of visited status of page in Blink. * CVE-2018-6138: Overly permissive policy in Extensions. * CVE-2018-6139: Restrictions bypass in the debugger extension API. * CVE-2018-6140: Restrictions bypass in the debugger extension API. * CVE-2018-6141: Heap buffer overflow in Skia. * CVE-2018-6142: Out of bounds memory access in V8. * CVE-2018-6143: Out of bounds memory access in V8. * CVE-2018-6144: Out of bounds memory access in PDFium. * CVE-2018-6145: Incorrect escaping of MathML in Blink. * CVE-2018-6147: Password fields not taking advantage of OS protections in Views. Additional changes: * Autoplay: Force enable on desktop for Web Audio This update enables the "Strict site isolation" feature for a larger percentage of users. This feature is a mitigation against the Spectre vulnerabilities. It can be turned on via: chrome://flags/#enable-site-per-process It can be disabled via: chrome://flags/#site-isolation-trial-opt-out Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-546=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-546=1 Package List: - openSUSE Leap 42.3 (x86_64): chromedriver-67.0.3396.62-161.1 chromedriver-debuginfo-67.0.3396.62-161.1 chromium-67.0.3396.62-161.1 chromium-debuginfo-67.0.3396.62-161.1 chromium-debugsource-67.0.3396.62-161.1 - openSUSE Leap 15.0 (x86_64): chromedriver-67.0.3396.62-lp150.2.3.1 chromedriver-debuginfo-67.0.3396.62-lp150.2.3.1 chromium-67.0.3396.62-lp150.2.3.1 chromium-debuginfo-67.0.3396.62-lp150.2.3.1 chromium-debugsource-67.0.3396.62-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-6123.html https://www.suse.com/security/cve/CVE-2018-6124.html https://www.suse.com/security/cve/CVE-2018-6125.html https://www.suse.com/security/cve/CVE-2018-6126.html https://www.suse.com/security/cve/CVE-2018-6127.html https://www.suse.com/security/cve/CVE-2018-6128.html https://www.suse.com/security/cve/CVE-2018-6129.html https://www.suse.com/security/cve/CVE-2018-6130.html https://www.suse.com/security/cve/CVE-2018-6131.html https://www.suse.com/security/cve/CVE-2018-6132.html https://www.suse.com/security/cve/CVE-2018-6133.html https://www.suse.com/security/cve/CVE-2018-6134.html https://www.suse.com/security/cve/CVE-2018-6135.html https://www.suse.com/security/cve/CVE-2018-6136.html https://www.suse.com/security/cve/CVE-2018-6137.html https://www.suse.com/security/cve/CVE-2018-6138.html https://www.suse.com/security/cve/CVE-2018-6139.html https://www.suse.com/security/cve/CVE-2018-6140.html https://www.suse.com/security/cve/CVE-2018-6141.html https://www.suse.com/security/cve/CVE-2018-6142.html https://www.suse.com/security/cve/CVE-2018-6143.html https://www.suse.com/security/cve/CVE-2018-6144.html https://www.suse.com/security/cve/CVE-2018-6145.html https://www.suse.com/security/cve/CVE-2018-6147.html https://bugzilla.suse.com/1095163 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0