September 2018 - openSUSE Security Announce

[security-announce] openSUSE-SU-2018:2957-1: moderate: Security update for openssl
by opensuse-security＠opensuse.org 30 Sep '18

30 Sep '18

openSUSE Security Update: Security update for openssl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2957-1 Rating: moderate References: #1089039 #1101246 #1101470 #1104789 #1106197 #997043 Cross-References: CVE-2018-0737 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has 5 fixes is now available. Description: This update for openssl fixes the following issues: These security issues were fixed: - Prevent One&Done side-channel attack on RSA that allowed physically near attackers to use EM emanations to recover information (bsc#1104789) - CVE-2018-0737: The RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could have recovered the private key (bsc#1089039) These non-security issues were fixed: - Add openssl(cli) Provide so the packages that require the openssl binary can require this instead of the new openssl meta package (bsc#1101470) - Fixed path to the engines which are under /lib64 on SLE-12 (bsc#1101246, bsc#997043) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1091=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libopenssl-devel-1.0.2j-29.1 libopenssl1_0_0-1.0.2j-29.1 libopenssl1_0_0-debuginfo-1.0.2j-29.1 libopenssl1_0_0-hmac-1.0.2j-29.1 openssl-1.0.2j-29.1 openssl-cavs-1.0.2j-29.1 openssl-cavs-debuginfo-1.0.2j-29.1 openssl-debuginfo-1.0.2j-29.1 openssl-debugsource-1.0.2j-29.1 - openSUSE Leap 42.3 (noarch): openssl-doc-1.0.2j-29.1 - openSUSE Leap 42.3 (x86_64): libopenssl-devel-32bit-1.0.2j-29.1 libopenssl1_0_0-32bit-1.0.2j-29.1 libopenssl1_0_0-debuginfo-32bit-1.0.2j-29.1 libopenssl1_0_0-hmac-32bit-1.0.2j-29.1 References: https://www.suse.com/security/cve/CVE-2018-0737.html https://bugzilla.suse.com/1089039 https://bugzilla.suse.com/1101246 https://bugzilla.suse.com/1101470 https://bugzilla.suse.com/1104789 https://bugzilla.suse.com/1106197 https://bugzilla.suse.com/997043 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2943-1: important: Security update for yast2-smt
by opensuse-security＠opensuse.org 28 Sep '18

28 Sep '18

openSUSE Security Update: Security update for yast2-smt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2943-1 Rating: important References: #1097560 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update fixes the following issue in yast2-smt: - Remove cron job rescheduling (bsc#1097560) This update is a requirement for the security update for SMT. Because of that it is tagged as security to ensure that all users, even those that only install security updates, install it. This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1081=1 Package List: - openSUSE Leap 42.3 (noarch): yast2-smt-3.0.14-2.3.1 References: https://bugzilla.suse.com/1097560 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2942-1: important: Security update for mgetty
by opensuse-security＠opensuse.org 28 Sep '18

28 Sep '18

openSUSE Security Update: Security update for mgetty ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2942-1 Rating: important References: #1108752 #1108756 #1108757 #1108761 #1108762 Cross-References: CVE-2018-16741 CVE-2018-16742 CVE-2018-16743 CVE-2018-16744 CVE-2018-16745 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for mgetty fixes the following issues: - CVE-2018-16741: The function do_activate() did not properly sanitize shell metacharacters to prevent command injection (bsc#1108752). - CVE-2018-16745: The mail_to parameter was not sanitized, leading to a buffer overflow if long untrusted input reached it (bsc#1108756). - CVE-2018-16744: The mail_to parameter was not sanitized, leading to command injection if untrusted input reached reach it (bsc#1108757). - CVE-2018-16742: Prevent stack-based buffer overflow that could have been triggered via a command-line parameter (bsc#1108762). - CVE-2018-16743: The command-line parameter username wsa passed unsanitized to strcpy(), which could have caused a stack-based buffer overflow (bsc#1108761). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1080=1 Package List: - openSUSE Leap 15.0 (x86_64): g3utils-1.1.37-lp150.2.3.1 g3utils-debuginfo-1.1.37-lp150.2.3.1 mgetty-1.1.37-lp150.2.3.1 mgetty-debuginfo-1.1.37-lp150.2.3.1 mgetty-debugsource-1.1.37-lp150.2.3.1 sendfax-1.1.37-lp150.2.3.1 sendfax-debuginfo-1.1.37-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-16741.html https://www.suse.com/security/cve/CVE-2018-16742.html https://www.suse.com/security/cve/CVE-2018-16743.html https://www.suse.com/security/cve/CVE-2018-16744.html https://www.suse.com/security/cve/CVE-2018-16745.html https://bugzilla.suse.com/1108752 https://bugzilla.suse.com/1108756 https://bugzilla.suse.com/1108757 https://bugzilla.suse.com/1108761 https://bugzilla.suse.com/1108762 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2941-1: moderate: Security update for gd
by opensuse-security＠opensuse.org 28 Sep '18

28 Sep '18

openSUSE Security Update: Security update for gd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2941-1 Rating: moderate References: #1105434 Cross-References: CVE-2018-1000222 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gd fixes the following issues: Security issue fixed: - CVE-2018-1000222: Fixed a double free vulnerability in gdImageBmpPtr() that could result in remote code execution. This could have been exploited via a specially crafted JPEG image files. (bsc#1105434) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1079=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): gd-2.2.5-lp150.3.3.1 gd-debuginfo-2.2.5-lp150.3.3.1 gd-debugsource-2.2.5-lp150.3.3.1 gd-devel-2.2.5-lp150.3.3.1 libgd3-2.2.5-lp150.3.3.1 libgd3-debuginfo-2.2.5-lp150.3.3.1 - openSUSE Leap 15.0 (x86_64): libgd3-32bit-2.2.5-lp150.3.3.1 libgd3-32bit-debuginfo-2.2.5-lp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-1000222.html https://bugzilla.suse.com/1105434 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2931-1: moderate: Security update for dom4j
by opensuse-security＠opensuse.org 28 Sep '18

28 Sep '18

openSUSE Security Update: Security update for dom4j ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2931-1 Rating: moderate References: #1105443 Cross-References: CVE-2018-1000632 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for dom4j fixes the following issues: - CVE-2018-1000632: Prevent XML injection vulnerability that allowed an attacker to tamper with XML documents (bsc#1105443) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1077=1 Package List: - openSUSE Leap 42.3 (noarch): dom4j-1.6.1-31.3.2 dom4j-demo-1.6.1-31.3.2 dom4j-javadoc-1.6.1-31.3.2 dom4j-manual-1.6.1-31.3.2 References: https://www.suse.com/security/cve/CVE-2018-1000632.html https://bugzilla.suse.com/1105443 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2929-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 28 Sep '18

28 Sep '18

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2929-1 Rating: moderate References: #1108753 Cross-References: CVE-2018-17082 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for php7 fixes the following issues: - CVE-2018-17082: The Apache2 component in PHP allowed XSS via the body of a "Transfer-Encoding: chunked" request, because the bucket brigade was mishandled in the php_handler function (bsc#1108753). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1078=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-mod_php7-7.0.7-49.1 apache2-mod_php7-debuginfo-7.0.7-49.1 php7-7.0.7-49.1 php7-bcmath-7.0.7-49.1 php7-bcmath-debuginfo-7.0.7-49.1 php7-bz2-7.0.7-49.1 php7-bz2-debuginfo-7.0.7-49.1 php7-calendar-7.0.7-49.1 php7-calendar-debuginfo-7.0.7-49.1 php7-ctype-7.0.7-49.1 php7-ctype-debuginfo-7.0.7-49.1 php7-curl-7.0.7-49.1 php7-curl-debuginfo-7.0.7-49.1 php7-dba-7.0.7-49.1 php7-dba-debuginfo-7.0.7-49.1 php7-debuginfo-7.0.7-49.1 php7-debugsource-7.0.7-49.1 php7-devel-7.0.7-49.1 php7-dom-7.0.7-49.1 php7-dom-debuginfo-7.0.7-49.1 php7-enchant-7.0.7-49.1 php7-enchant-debuginfo-7.0.7-49.1 php7-exif-7.0.7-49.1 php7-exif-debuginfo-7.0.7-49.1 php7-fastcgi-7.0.7-49.1 php7-fastcgi-debuginfo-7.0.7-49.1 php7-fileinfo-7.0.7-49.1 php7-fileinfo-debuginfo-7.0.7-49.1 php7-firebird-7.0.7-49.1 php7-firebird-debuginfo-7.0.7-49.1 php7-fpm-7.0.7-49.1 php7-fpm-debuginfo-7.0.7-49.1 php7-ftp-7.0.7-49.1 php7-ftp-debuginfo-7.0.7-49.1 php7-gd-7.0.7-49.1 php7-gd-debuginfo-7.0.7-49.1 php7-gettext-7.0.7-49.1 php7-gettext-debuginfo-7.0.7-49.1 php7-gmp-7.0.7-49.1 php7-gmp-debuginfo-7.0.7-49.1 php7-iconv-7.0.7-49.1 php7-iconv-debuginfo-7.0.7-49.1 php7-imap-7.0.7-49.1 php7-imap-debuginfo-7.0.7-49.1 php7-intl-7.0.7-49.1 php7-intl-debuginfo-7.0.7-49.1 php7-json-7.0.7-49.1 php7-json-debuginfo-7.0.7-49.1 php7-ldap-7.0.7-49.1 php7-ldap-debuginfo-7.0.7-49.1 php7-mbstring-7.0.7-49.1 php7-mbstring-debuginfo-7.0.7-49.1 php7-mcrypt-7.0.7-49.1 php7-mcrypt-debuginfo-7.0.7-49.1 php7-mysql-7.0.7-49.1 php7-mysql-debuginfo-7.0.7-49.1 php7-odbc-7.0.7-49.1 php7-odbc-debuginfo-7.0.7-49.1 php7-opcache-7.0.7-49.1 php7-opcache-debuginfo-7.0.7-49.1 php7-openssl-7.0.7-49.1 php7-openssl-debuginfo-7.0.7-49.1 php7-pcntl-7.0.7-49.1 php7-pcntl-debuginfo-7.0.7-49.1 php7-pdo-7.0.7-49.1 php7-pdo-debuginfo-7.0.7-49.1 php7-pgsql-7.0.7-49.1 php7-pgsql-debuginfo-7.0.7-49.1 php7-phar-7.0.7-49.1 php7-phar-debuginfo-7.0.7-49.1 php7-posix-7.0.7-49.1 php7-posix-debuginfo-7.0.7-49.1 php7-pspell-7.0.7-49.1 php7-pspell-debuginfo-7.0.7-49.1 php7-readline-7.0.7-49.1 php7-readline-debuginfo-7.0.7-49.1 php7-shmop-7.0.7-49.1 php7-shmop-debuginfo-7.0.7-49.1 php7-snmp-7.0.7-49.1 php7-snmp-debuginfo-7.0.7-49.1 php7-soap-7.0.7-49.1 php7-soap-debuginfo-7.0.7-49.1 php7-sockets-7.0.7-49.1 php7-sockets-debuginfo-7.0.7-49.1 php7-sqlite-7.0.7-49.1 php7-sqlite-debuginfo-7.0.7-49.1 php7-sysvmsg-7.0.7-49.1 php7-sysvmsg-debuginfo-7.0.7-49.1 php7-sysvsem-7.0.7-49.1 php7-sysvsem-debuginfo-7.0.7-49.1 php7-sysvshm-7.0.7-49.1 php7-sysvshm-debuginfo-7.0.7-49.1 php7-tidy-7.0.7-49.1 php7-tidy-debuginfo-7.0.7-49.1 php7-tokenizer-7.0.7-49.1 php7-tokenizer-debuginfo-7.0.7-49.1 php7-wddx-7.0.7-49.1 php7-wddx-debuginfo-7.0.7-49.1 php7-xmlreader-7.0.7-49.1 php7-xmlreader-debuginfo-7.0.7-49.1 php7-xmlrpc-7.0.7-49.1 php7-xmlrpc-debuginfo-7.0.7-49.1 php7-xmlwriter-7.0.7-49.1 php7-xmlwriter-debuginfo-7.0.7-49.1 php7-xsl-7.0.7-49.1 php7-xsl-debuginfo-7.0.7-49.1 php7-zip-7.0.7-49.1 php7-zip-debuginfo-7.0.7-49.1 php7-zlib-7.0.7-49.1 php7-zlib-debuginfo-7.0.7-49.1 - openSUSE Leap 42.3 (noarch): php7-pear-7.0.7-49.1 php7-pear-Archive_Tar-7.0.7-49.1 References: https://www.suse.com/security/cve/CVE-2018-17082.html https://bugzilla.suse.com/1108753 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2895-1: moderate: Security update for ant
by opensuse-security＠opensuse.org 27 Sep '18

27 Sep '18

openSUSE Security Update: Security update for ant ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2895-1 Rating: moderate References: #1100053 Cross-References: CVE-2018-10886 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ant fixes the following issues: Security issue fixed: - CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file paths, which allowed arbitrary file writes and could potentially lead to code execution (bsc#1100053) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1057=1 Package List: - openSUSE Leap 15.0 (noarch): ant-1.9.10-lp150.2.3.1 ant-antlr-1.9.10-lp150.2.3.1 ant-apache-bcel-1.9.10-lp150.2.3.1 ant-apache-bsf-1.9.10-lp150.2.3.1 ant-apache-log4j-1.9.10-lp150.2.3.1 ant-apache-oro-1.9.10-lp150.2.3.1 ant-apache-regexp-1.9.10-lp150.2.3.1 ant-apache-resolver-1.9.10-lp150.2.3.1 ant-apache-xalan2-1.9.10-lp150.2.3.1 ant-commons-logging-1.9.10-lp150.2.3.1 ant-commons-net-1.9.10-lp150.2.3.1 ant-javamail-1.9.10-lp150.2.3.1 ant-jdepend-1.9.10-lp150.2.3.1 ant-jmf-1.9.10-lp150.2.3.1 ant-jsch-1.9.10-lp150.2.3.1 ant-junit-1.9.10-lp150.2.3.1 ant-manual-1.9.10-lp150.2.3.1 ant-scripts-1.9.10-lp150.2.3.1 ant-swing-1.9.10-lp150.2.3.1 ant-testutil-1.9.10-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-10886.html https://bugzilla.suse.com/1100053 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2885-1: moderate: Security update for shadow
by opensuse-security＠opensuse.org 26 Sep '18

26 Sep '18

openSUSE Security Update: Security update for shadow ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2885-1 Rating: moderate References: #1106914 Cross-References: CVE-2018-16588 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for shadow fixes the following security issue: - CVE-2018-16588: Prevent useradd from creating intermediate directories with mode 0777 (bsc#1106914) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1055=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): shadow-4.2.1-20.1 shadow-debuginfo-4.2.1-20.1 shadow-debugsource-4.2.1-20.1 References: https://www.suse.com/security/cve/CVE-2018-16588.html https://bugzilla.suse.com/1106914 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2881-1: important: Security update for libzypp, zypper
by opensuse-security＠opensuse.org 26 Sep '18

26 Sep '18

openSUSE Security Update: Security update for libzypp, zypper ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2881-1 Rating: important References: #1036304 #1049825 #1070851 #1076192 #1088705 #1091624 #1092413 #1096803 #1099847 #1100028 #1101349 #1102429 Cross-References: CVE-2018-7685 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has 11 fixes is now available. Description: This update for libzypp, zypper fixes the following issues: Update libzypp to version 16.17.20: Security issues fixed: - PackageProvider: Validate delta rpms before caching (bsc#1091624, bsc#1088705, CVE-2018-7685) - PackageProvider: Validate downloaded rpm package signatures before caching (bsc#1091624, bsc#1088705, CVE-2018-7685) Other bugs fixed: - lsof: use '-K i' if lsof supports it (bsc#1099847, bsc#1036304) - Handle http error 502 Bad Gateway in curl backend (bsc#1070851) - RepoManager: Explicitly request repo2solv to generate application pseudo packages. - libzypp-devel should not require cmake (bsc#1101349) - HardLocksFile: Prevent against empty commit without Target having been been loaded (bsc#1096803) - Avoid zombie tar processes (bsc#1076192) Update to zypper to version 1.13.45: Other bugs fixed: - XML <install-summary> attribute `packages-to-change` added (bsc#1102429) - man: Strengthen that `--config FILE' affects zypper.conf, not zypp.conf (bsc#1100028) - Prevent nested calls to exit() if aborted by a signal (bsc#1092413) - ansi.h: Prevent ESC sequence strings from going out of scope (bsc#1092413) - Fix: zypper bash completion expands non-existing options (bsc#1049825) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1054=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libzypp-16.17.20-27.1 libzypp-debuginfo-16.17.20-27.1 libzypp-debugsource-16.17.20-27.1 libzypp-devel-16.17.20-27.1 libzypp-devel-doc-16.17.20-27.1 zypper-1.13.45-20.1 zypper-debuginfo-1.13.45-20.1 zypper-debugsource-1.13.45-20.1 - openSUSE Leap 42.3 (noarch): zypper-aptitude-1.13.45-20.1 zypper-log-1.13.45-20.1 References: https://www.suse.com/security/cve/CVE-2018-7685.html https://bugzilla.suse.com/1036304 https://bugzilla.suse.com/1049825 https://bugzilla.suse.com/1070851 https://bugzilla.suse.com/1076192 https://bugzilla.suse.com/1088705 https://bugzilla.suse.com/1091624 https://bugzilla.suse.com/1092413 https://bugzilla.suse.com/1096803 https://bugzilla.suse.com/1099847 https://bugzilla.suse.com/1100028 https://bugzilla.suse.com/1101349 https://bugzilla.suse.com/1102429 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2880-1: moderate: Security update for tiff
by opensuse-security＠opensuse.org 26 Sep '18

26 Sep '18

openSUSE Security Update: Security update for tiff ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2880-1 Rating: moderate References: #1074186 #1092480 #983440 Cross-References: CVE-2016-5319 CVE-2017-17942 CVE-2018-10779 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for tiff fixes the following issues: Security issues fixed: - CVE-2018-10779: Fixed a heap-based buffer overflow in TIFFWriteScanline() in tif_write.c (bsc#1092480) - CVE-2017-17942: Fixed a heap-based buffer overflow in the function PackBitsEncode in tif_packbits.c. (bsc#1074186) - CVE-2016-5319: Fixed a beap-based buffer overflow in bmp2tiff (bsc#983440) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1056=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libtiff-devel-4.0.9-34.1 libtiff5-4.0.9-34.1 libtiff5-debuginfo-4.0.9-34.1 tiff-4.0.9-34.1 tiff-debuginfo-4.0.9-34.1 tiff-debugsource-4.0.9-34.1 - openSUSE Leap 42.3 (x86_64): libtiff-devel-32bit-4.0.9-34.1 libtiff5-32bit-4.0.9-34.1 libtiff5-debuginfo-32bit-4.0.9-34.1 References: https://www.suse.com/security/cve/CVE-2016-5319.html https://www.suse.com/security/cve/CVE-2017-17942.html https://www.suse.com/security/cve/CVE-2018-10779.html https://bugzilla.suse.com/1074186 https://bugzilla.suse.com/1092480 https://bugzilla.suse.com/983440 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2859-1: moderate: Security update for php5-smarty3
by opensuse-security＠opensuse.org 25 Sep '18

25 Sep '18

openSUSE Security Update: Security update for php5-smarty3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2859-1 Rating: moderate References: #1108741 Cross-References: CVE-2018-16381 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for php5-smarty3 fixes the following issues: - CVE-2018-16381: Prevent traversal vulnerability due to insufficient template code sanitization that allowed attackers controlling the executed template code to bypass the trusted directory security restriction and read arbitrary files (bsc#1108741). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1052=1 Package List: - openSUSE Leap 42.3 (noarch): php5-smarty3-3.1.33-5.5.1 php5-smarty3-doc-3.1.33-5.5.1 References: https://www.suse.com/security/cve/CVE-2018-16381.html https://bugzilla.suse.com/1108741 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2856-1: moderate: Security update for apache2
by opensuse-security＠opensuse.org 25 Sep '18

25 Sep '18

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2856-1 Rating: moderate References: #1016715 #1104826 Cross-References: CVE-2016-4975 CVE-2016-8743 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for apache2 fixes the following issues: Security issues fixed: - CVE-2016-8743: Fixed liberal whitespace interpretation accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-end application servers, either through mod_proxy or using conventional CGI mechanisms, and may result in request smuggling, response splitting and cache pollution. (bsc#1016715) - CVE-2016-4975: Fixed possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. This issue was mitigated by changes which prohibit CR or LF injection into the "Location" or other outbound header key or value. (bsc#1104826) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1046=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-2.4.23-28.1 apache2-debuginfo-2.4.23-28.1 apache2-debugsource-2.4.23-28.1 apache2-devel-2.4.23-28.1 apache2-event-2.4.23-28.1 apache2-event-debuginfo-2.4.23-28.1 apache2-example-pages-2.4.23-28.1 apache2-prefork-2.4.23-28.1 apache2-prefork-debuginfo-2.4.23-28.1 apache2-utils-2.4.23-28.1 apache2-utils-debuginfo-2.4.23-28.1 apache2-worker-2.4.23-28.1 apache2-worker-debuginfo-2.4.23-28.1 - openSUSE Leap 42.3 (noarch): apache2-doc-2.4.23-28.1 References: https://www.suse.com/security/cve/CVE-2016-4975.html https://www.suse.com/security/cve/CVE-2016-8743.html https://bugzilla.suse.com/1016715 https://bugzilla.suse.com/1104826 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2855-1: moderate: Security update for nodejs8
by opensuse-security＠opensuse.org 25 Sep '18

25 Sep '18

openSUSE Security Update: Security update for nodejs8 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2855-1 Rating: moderate References: #1097158 #1097748 #1105019 Cross-References: CVE-2018-0732 CVE-2018-12115 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for nodejs8 to version 8.11.4 fixes the following issues: Security issues fixed: - CVE-2018-12115: Fixed an out-of-bounds memory write in Buffer that could be used to write to memory outside of a Buffer's memory space buffer (bsc#1105019) - Upgrade to OpenSSL 1.0.2p, which fixed: - CVE-2018-0732: Client denial-of-service due to large DH parameter (bsc#1097158) - ECDSA key extraction via local side-channel Other changes made: - Recommend same major version npm package (bsc#1097748) - Fix parallel/test-tls-passphrase.js test to continue to function with older versions of OpenSSL library. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1047=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): nodejs8-8.11.4-lp150.2.6.1 nodejs8-debuginfo-8.11.4-lp150.2.6.1 nodejs8-debugsource-8.11.4-lp150.2.6.1 nodejs8-devel-8.11.4-lp150.2.6.1 npm8-8.11.4-lp150.2.6.1 - openSUSE Leap 15.0 (noarch): nodejs8-docs-8.11.4-lp150.2.6.1 References: https://www.suse.com/security/cve/CVE-2018-0732.html https://www.suse.com/security/cve/CVE-2018-12115.html https://bugzilla.suse.com/1097158 https://bugzilla.suse.com/1097748 https://bugzilla.suse.com/1105019 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2854-1: moderate: Security update for gnutls
by opensuse-security＠opensuse.org 25 Sep '18

25 Sep '18

openSUSE Security Update: Security update for gnutls ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2854-1 Rating: moderate References: #1047002 #1105437 #1105459 #1105460 Cross-References: CVE-2017-10790 CVE-2018-10844 CVE-2018-10845 CVE-2018-10846 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for gnutls fixes the following issues: Security issues fixed: - Improved mitigations against Lucky 13 class of attacks - CVE-2018-10846: "Just in Time" PRIME + PROBE cache-based side channel attack can lead to plaintext recovery (bsc#1105460) - CVE-2018-10845: HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant (bsc#1105459) - CVE-2018-10844: HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls (bsc#1105437) - CVE-2017-10790: The _asn1_check_identifier function in Libtasn1 caused a NULL pointer dereference and crash (bsc#1047002) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1049=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): gnutls-3.3.27-2.3.1 gnutls-debuginfo-3.3.27-2.3.1 gnutls-debugsource-3.3.27-2.3.1 libgnutls-devel-3.3.27-2.3.1 libgnutls-openssl-devel-3.3.27-2.3.1 libgnutls-openssl27-3.3.27-2.3.1 libgnutls-openssl27-debuginfo-3.3.27-2.3.1 libgnutls28-3.3.27-2.3.1 libgnutls28-debuginfo-3.3.27-2.3.1 libgnutlsxx-devel-3.3.27-2.3.1 libgnutlsxx28-3.3.27-2.3.1 libgnutlsxx28-debuginfo-3.3.27-2.3.1 - openSUSE Leap 42.3 (x86_64): libgnutls-devel-32bit-3.3.27-2.3.1 libgnutls28-32bit-3.3.27-2.3.1 libgnutls28-debuginfo-32bit-3.3.27-2.3.1 References: https://www.suse.com/security/cve/CVE-2017-10790.html https://www.suse.com/security/cve/CVE-2018-10844.html https://www.suse.com/security/cve/CVE-2018-10845.html https://www.suse.com/security/cve/CVE-2018-10846.html https://bugzilla.suse.com/1047002 https://bugzilla.suse.com/1105437 https://bugzilla.suse.com/1105459 https://bugzilla.suse.com/1105460 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2852-1: moderate: Security update for shadow
by opensuse-security＠opensuse.org 25 Sep '18

25 Sep '18

openSUSE Security Update: Security update for shadow ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2852-1 Rating: moderate References: #1106914 Cross-References: CVE-2018-16588 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for shadow fixes the following security issue: - CVE-2018-16588: Prevent useradd from creating intermediate directories with mode 0777 (bsc#1106914) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1051=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): shadow-4.5-lp150.6.3.1 shadow-debuginfo-4.5-lp150.6.3.1 shadow-debugsource-4.5-lp150.6.3.1 References: https://www.suse.com/security/cve/CVE-2018-16588.html https://bugzilla.suse.com/1106914 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2851-1: moderate: Security update for gd
by opensuse-security＠opensuse.org 25 Sep '18

25 Sep '18

openSUSE Security Update: Security update for gd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2851-1 Rating: moderate References: #1105434 Cross-References: CVE-2018-1000222 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gd fixes the following issues: Security issue fixed: - CVE-2018-1000222: Fixed a double free vulnerability in gdImageBmpPtr() that could result in remote code execution. This could have been exploited via a specially crafted JPEG image files. (bsc#1105434) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1048=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): gd-2.1.0-27.1 gd-debuginfo-2.1.0-27.1 gd-debugsource-2.1.0-27.1 gd-devel-2.1.0-27.1 - openSUSE Leap 42.3 (x86_64): gd-32bit-2.1.0-27.1 gd-debuginfo-32bit-2.1.0-27.1 References: https://www.suse.com/security/cve/CVE-2018-1000222.html https://bugzilla.suse.com/1105434 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2849-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 25 Sep '18

25 Sep '18

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2849-1 Rating: moderate References: #1105434 Cross-References: CVE-2018-1000222 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for php7 fixes the following issues: Security issue fixed: - CVE-2018-1000222: Fixed a double free vulnerability in gdImageBmpPtr() that could result in remote code execution. This could have been exploited via a specially crafted JPEG image files. (bsc#1105434) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1050=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): apache2-mod_php7-7.2.5-lp150.2.12.1 apache2-mod_php7-debuginfo-7.2.5-lp150.2.12.1 php7-7.2.5-lp150.2.12.1 php7-bcmath-7.2.5-lp150.2.12.1 php7-bcmath-debuginfo-7.2.5-lp150.2.12.1 php7-bz2-7.2.5-lp150.2.12.1 php7-bz2-debuginfo-7.2.5-lp150.2.12.1 php7-calendar-7.2.5-lp150.2.12.1 php7-calendar-debuginfo-7.2.5-lp150.2.12.1 php7-ctype-7.2.5-lp150.2.12.1 php7-ctype-debuginfo-7.2.5-lp150.2.12.1 php7-curl-7.2.5-lp150.2.12.1 php7-curl-debuginfo-7.2.5-lp150.2.12.1 php7-dba-7.2.5-lp150.2.12.1 php7-dba-debuginfo-7.2.5-lp150.2.12.1 php7-debuginfo-7.2.5-lp150.2.12.1 php7-debugsource-7.2.5-lp150.2.12.1 php7-devel-7.2.5-lp150.2.12.1 php7-dom-7.2.5-lp150.2.12.1 php7-dom-debuginfo-7.2.5-lp150.2.12.1 php7-embed-7.2.5-lp150.2.12.1 php7-embed-debuginfo-7.2.5-lp150.2.12.1 php7-enchant-7.2.5-lp150.2.12.1 php7-enchant-debuginfo-7.2.5-lp150.2.12.1 php7-exif-7.2.5-lp150.2.12.1 php7-exif-debuginfo-7.2.5-lp150.2.12.1 php7-fastcgi-7.2.5-lp150.2.12.1 php7-fastcgi-debuginfo-7.2.5-lp150.2.12.1 php7-fileinfo-7.2.5-lp150.2.12.1 php7-fileinfo-debuginfo-7.2.5-lp150.2.12.1 php7-firebird-7.2.5-lp150.2.12.1 php7-firebird-debuginfo-7.2.5-lp150.2.12.1 php7-fpm-7.2.5-lp150.2.12.1 php7-fpm-debuginfo-7.2.5-lp150.2.12.1 php7-ftp-7.2.5-lp150.2.12.1 php7-ftp-debuginfo-7.2.5-lp150.2.12.1 php7-gd-7.2.5-lp150.2.12.1 php7-gd-debuginfo-7.2.5-lp150.2.12.1 php7-gettext-7.2.5-lp150.2.12.1 php7-gettext-debuginfo-7.2.5-lp150.2.12.1 php7-gmp-7.2.5-lp150.2.12.1 php7-gmp-debuginfo-7.2.5-lp150.2.12.1 php7-iconv-7.2.5-lp150.2.12.1 php7-iconv-debuginfo-7.2.5-lp150.2.12.1 php7-intl-7.2.5-lp150.2.12.1 php7-intl-debuginfo-7.2.5-lp150.2.12.1 php7-json-7.2.5-lp150.2.12.1 php7-json-debuginfo-7.2.5-lp150.2.12.1 php7-ldap-7.2.5-lp150.2.12.1 php7-ldap-debuginfo-7.2.5-lp150.2.12.1 php7-mbstring-7.2.5-lp150.2.12.1 php7-mbstring-debuginfo-7.2.5-lp150.2.12.1 php7-mysql-7.2.5-lp150.2.12.1 php7-mysql-debuginfo-7.2.5-lp150.2.12.1 php7-odbc-7.2.5-lp150.2.12.1 php7-odbc-debuginfo-7.2.5-lp150.2.12.1 php7-opcache-7.2.5-lp150.2.12.1 php7-opcache-debuginfo-7.2.5-lp150.2.12.1 php7-openssl-7.2.5-lp150.2.12.1 php7-openssl-debuginfo-7.2.5-lp150.2.12.1 php7-pcntl-7.2.5-lp150.2.12.1 php7-pcntl-debuginfo-7.2.5-lp150.2.12.1 php7-pdo-7.2.5-lp150.2.12.1 php7-pdo-debuginfo-7.2.5-lp150.2.12.1 php7-pgsql-7.2.5-lp150.2.12.1 php7-pgsql-debuginfo-7.2.5-lp150.2.12.1 php7-phar-7.2.5-lp150.2.12.1 php7-phar-debuginfo-7.2.5-lp150.2.12.1 php7-posix-7.2.5-lp150.2.12.1 php7-posix-debuginfo-7.2.5-lp150.2.12.1 php7-readline-7.2.5-lp150.2.12.1 php7-readline-debuginfo-7.2.5-lp150.2.12.1 php7-shmop-7.2.5-lp150.2.12.1 php7-shmop-debuginfo-7.2.5-lp150.2.12.1 php7-snmp-7.2.5-lp150.2.12.1 php7-snmp-debuginfo-7.2.5-lp150.2.12.1 php7-soap-7.2.5-lp150.2.12.1 php7-soap-debuginfo-7.2.5-lp150.2.12.1 php7-sockets-7.2.5-lp150.2.12.1 php7-sockets-debuginfo-7.2.5-lp150.2.12.1 php7-sodium-7.2.5-lp150.2.12.1 php7-sodium-debuginfo-7.2.5-lp150.2.12.1 php7-sqlite-7.2.5-lp150.2.12.1 php7-sqlite-debuginfo-7.2.5-lp150.2.12.1 php7-sysvmsg-7.2.5-lp150.2.12.1 php7-sysvmsg-debuginfo-7.2.5-lp150.2.12.1 php7-sysvsem-7.2.5-lp150.2.12.1 php7-sysvsem-debuginfo-7.2.5-lp150.2.12.1 php7-sysvshm-7.2.5-lp150.2.12.1 php7-sysvshm-debuginfo-7.2.5-lp150.2.12.1 php7-tidy-7.2.5-lp150.2.12.1 php7-tidy-debuginfo-7.2.5-lp150.2.12.1 php7-tokenizer-7.2.5-lp150.2.12.1 php7-tokenizer-debuginfo-7.2.5-lp150.2.12.1 php7-wddx-7.2.5-lp150.2.12.1 php7-wddx-debuginfo-7.2.5-lp150.2.12.1 php7-xmlreader-7.2.5-lp150.2.12.1 php7-xmlreader-debuginfo-7.2.5-lp150.2.12.1 php7-xmlrpc-7.2.5-lp150.2.12.1 php7-xmlrpc-debuginfo-7.2.5-lp150.2.12.1 php7-xmlwriter-7.2.5-lp150.2.12.1 php7-xmlwriter-debuginfo-7.2.5-lp150.2.12.1 php7-xsl-7.2.5-lp150.2.12.1 php7-xsl-debuginfo-7.2.5-lp150.2.12.1 php7-zip-7.2.5-lp150.2.12.1 php7-zip-debuginfo-7.2.5-lp150.2.12.1 php7-zlib-7.2.5-lp150.2.12.1 php7-zlib-debuginfo-7.2.5-lp150.2.12.1 - openSUSE Leap 15.0 (noarch): php7-pear-7.2.5-lp150.2.12.1 php7-pear-Archive_Tar-7.2.5-lp150.2.12.1 References: https://www.suse.com/security/cve/CVE-2018-1000222.html https://bugzilla.suse.com/1105434 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2833-1: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 24 Sep '18

24 Sep '18

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2833-1 Rating: low References: #1108282 #1108283 Cross-References: CVE-2018-16749 CVE-2018-16750 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for GraphicsMagick fixes the following security issue: - CVE-2018-16750: Prevent memory leak in the formatIPTCfromBuffer function (bsc#1108283). An earlier update added a change that also fixed this issues that was unknown at the time of release: - CVE-2018-16749: Added missing NULL check in ReadOneJNGImage that allowed an attacker to cause a denial of service (WriteBlob assertion failure and application exit) via a crafted file (bsc#1108282). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1045=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): GraphicsMagick-1.3.25-108.1 GraphicsMagick-debuginfo-1.3.25-108.1 GraphicsMagick-debugsource-1.3.25-108.1 GraphicsMagick-devel-1.3.25-108.1 libGraphicsMagick++-Q16-12-1.3.25-108.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.25-108.1 libGraphicsMagick++-devel-1.3.25-108.1 libGraphicsMagick-Q16-3-1.3.25-108.1 libGraphicsMagick-Q16-3-debuginfo-1.3.25-108.1 libGraphicsMagick3-config-1.3.25-108.1 libGraphicsMagickWand-Q16-2-1.3.25-108.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.25-108.1 perl-GraphicsMagick-1.3.25-108.1 perl-GraphicsMagick-debuginfo-1.3.25-108.1 References: https://www.suse.com/security/cve/CVE-2018-16749.html https://www.suse.com/security/cve/CVE-2018-16750.html https://bugzilla.suse.com/1108282 https://bugzilla.suse.com/1108283 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2827-1: moderate: Security update for jhead
by opensuse-security＠opensuse.org 24 Sep '18

24 Sep '18

openSUSE Security Update: Security update for jhead ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2827-1 Rating: moderate References: #1108480 Cross-References: CVE-2016-3822 CVE-2018-16554 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for jhead fixes the following security issues: - CVE-2016-3822: jhead remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds access) via crafted EXIF data (bsc#1108480). - CVE-2018-16554: The ProcessGpsInfo function may have allowed a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of inconsistency between float and double in a sprintf format string during TAG_GPS_ALT handling (bsc#1108480). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1044=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1044=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1044=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): jhead-3.00-11.1 jhead-debuginfo-3.00-11.1 jhead-debugsource-3.00-11.1 - openSUSE Leap 15.0 (x86_64): jhead-3.00-lp150.3.3.1 jhead-debuginfo-3.00-lp150.3.3.1 jhead-debugsource-3.00-lp150.3.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): jhead-3.00-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2016-3822.html https://www.suse.com/security/cve/CVE-2018-16554.html https://bugzilla.suse.com/1108480 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2820-1: moderate: Security update for bouncycastle
by opensuse-security＠opensuse.org 24 Sep '18

24 Sep '18

openSUSE Security Update: Security update for bouncycastle ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2820-1 Rating: moderate References: #1096291 Cross-References: CVE-2018-1000180 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bouncycastle fixes the following security issue: - CVE-2018-1000180: Fixed flaw in the Low-level interface to RSA key pair generator. RSA Key Pairs generated in low-level API with added certainty may had less M-R tests than expected (bsc#1096291). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1043=1 Package List: - openSUSE Leap 42.3 (noarch): bouncycastle-1.60-23.10.1 bouncycastle-javadoc-1.60-23.10.1 References: https://www.suse.com/security/cve/CVE-2018-1000180.html https://bugzilla.suse.com/1096291 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2819-1: moderate: Security update for liblouis
by opensuse-security＠opensuse.org 24 Sep '18

24 Sep '18

openSUSE Security Update: Security update for liblouis ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2819-1 Rating: moderate References: #1095189 #1095825 #1095826 #1095827 #1095945 #1097103 Cross-References: CVE-2018-11440 CVE-2018-11577 CVE-2018-11683 CVE-2018-11684 CVE-2018-11685 CVE-2018-12085 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for liblouis fixes the following issues: Security issues fixed: - CVE-2018-11440: Fixed a stack-based buffer overflow in the function parseChars() in compileTranslationTable.c (bsc#1095189) - CVE-2018-11577: Fixed a segmentation fault in lou_logPrint in logging.c (bsc#1095945) - CVE-2018-11683: Fixed a stack-based buffer overflow in the function parseChars() in compileTranslationTable.c (different vulnerability than CVE-2018-11440) (bsc#1095827) - CVE-2018-11684: Fixed stack-based buffer overflow in the function includeFile() in compileTranslationTable.c (bsc#1095826) - CVE-2018-11685: Fixed a stack-based buffer overflow in the function compileHyphenation() in compileTranslationTable.c (bsc#1095825) - CVE-2018-12085: Fixed a stack-based buffer overflow in the function parseChars() in compileTranslationTable.c (different vulnerability than CVE-2018-11440) (bsc#1097103) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1039=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): liblouis-data-2.6.4-9.1 liblouis-debugsource-2.6.4-9.1 liblouis-devel-2.6.4-9.1 liblouis-doc-2.6.4-9.1 liblouis-tools-2.6.4-9.1 liblouis-tools-debuginfo-2.6.4-9.1 liblouis9-2.6.4-9.1 liblouis9-debuginfo-2.6.4-9.1 python-louis-2.6.4-9.1 References: https://www.suse.com/security/cve/CVE-2018-11440.html https://www.suse.com/security/cve/CVE-2018-11577.html https://www.suse.com/security/cve/CVE-2018-11683.html https://www.suse.com/security/cve/CVE-2018-11684.html https://www.suse.com/security/cve/CVE-2018-11685.html https://www.suse.com/security/cve/CVE-2018-12085.html https://bugzilla.suse.com/1095189 https://bugzilla.suse.com/1095825 https://bugzilla.suse.com/1095826 https://bugzilla.suse.com/1095827 https://bugzilla.suse.com/1095945 https://bugzilla.suse.com/1097103 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2818-1: moderate: Security update for gdm
by opensuse-security＠opensuse.org 24 Sep '18

24 Sep '18

openSUSE Security Update: Security update for gdm ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2818-1 Rating: moderate References: #1081947 #1103093 #1103737 Cross-References: CVE-2018-14424 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for gdm provides the following fixes: This security issue was fixed: - CVE-2018-14424: The daemon in GDM did not properly unexport display objects from its D-Bus interface when they are destroyed, which allowed a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial of service or potential code execution (bsc#1103737) These non-security issues were fixed: - Enable pam_keyinit module (bsc#1081947) - Fix a build race in SLE (bsc#1103093) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1037=1 Package List: - openSUSE Leap 15.0 (x86_64): gdm-3.26.2.1-lp150.11.3.1 gdm-debuginfo-3.26.2.1-lp150.11.3.1 gdm-debugsource-3.26.2.1-lp150.11.3.1 gdm-devel-3.26.2.1-lp150.11.3.1 libgdm1-3.26.2.1-lp150.11.3.1 libgdm1-debuginfo-3.26.2.1-lp150.11.3.1 typelib-1_0-Gdm-1_0-3.26.2.1-lp150.11.3.1 - openSUSE Leap 15.0 (noarch): gdm-branding-upstream-3.26.2.1-lp150.11.3.1 gdm-lang-3.26.2.1-lp150.11.3.1 gdmflexiserver-3.26.2.1-lp150.11.3.1 References: https://www.suse.com/security/cve/CVE-2018-14424.html https://bugzilla.suse.com/1081947 https://bugzilla.suse.com/1103093 https://bugzilla.suse.com/1103737 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2817-1: moderate: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 24 Sep '18

24 Sep '18

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2817-1 Rating: moderate References: #1107343 #1109363 Cross-References: CVE-2018-12383 CVE-2018-12385 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for Mozilla Firefox to version 60.2.1esr fixes the following issues: Security issues fixed (MFSA 2018-23): - CVE-2018-12385: Crash in TransportSecurityInfo due to cached data (boo#1109363) - CVE-2018-12383: Setting a master password did not delete unencrypted previously stored passwords (boo#1107343) Bugx fixed: - Fixed a startup crash affecting users migrating from older ESR releases Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1042=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1042=1 Package List: - openSUSE Leap 42.3 (x86_64): MozillaFirefox-60.2.1-112.1 MozillaFirefox-branding-upstream-60.2.1-112.1 MozillaFirefox-buildsymbols-60.2.1-112.1 MozillaFirefox-debuginfo-60.2.1-112.1 MozillaFirefox-debugsource-60.2.1-112.1 MozillaFirefox-devel-60.2.1-112.1 MozillaFirefox-translations-common-60.2.1-112.1 MozillaFirefox-translations-other-60.2.1-112.1 - openSUSE Leap 15.0 (x86_64): MozillaFirefox-60.2.1-lp150.3.17.1 MozillaFirefox-branding-upstream-60.2.1-lp150.3.17.1 MozillaFirefox-buildsymbols-60.2.1-lp150.3.17.1 MozillaFirefox-debuginfo-60.2.1-lp150.3.17.1 MozillaFirefox-debugsource-60.2.1-lp150.3.17.1 MozillaFirefox-devel-60.2.1-lp150.3.17.1 MozillaFirefox-translations-common-60.2.1-lp150.3.17.1 MozillaFirefox-translations-other-60.2.1-lp150.3.17.1 References: https://www.suse.com/security/cve/CVE-2018-12383.html https://www.suse.com/security/cve/CVE-2018-12385.html https://bugzilla.suse.com/1107343 https://bugzilla.suse.com/1109363 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2816-1: moderate: Security update for nodejs6
by opensuse-security＠opensuse.org 24 Sep '18

24 Sep '18

openSUSE Security Update: Security update for nodejs6 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2816-1 Rating: moderate References: #1097158 #1097748 #1105019 Cross-References: CVE-2018-0732 CVE-2018-12115 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for nodejs6 to version 6.14.4 fixes the following issues: Security issues fixed: CVE-2018-12115: Fixed an out-of-bounds (OOB) write in Buffer.write() for UCS-2 encoding (bsc#1105019) CVE-2018-0732: Upgrade to OpenSSL 1.0.2p, fixing a client DoS due to large DH parameter (bsc#1097158) Other issues fixed: - Recommend same major version npm package (bsc#1097748) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1041=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): nodejs6-6.14.4-15.1 nodejs6-debuginfo-6.14.4-15.1 nodejs6-debugsource-6.14.4-15.1 nodejs6-devel-6.14.4-15.1 npm6-6.14.4-15.1 - openSUSE Leap 42.3 (noarch): nodejs6-docs-6.14.4-15.1 References: https://www.suse.com/security/cve/CVE-2018-0732.html https://www.suse.com/security/cve/CVE-2018-12115.html https://bugzilla.suse.com/1097158 https://bugzilla.suse.com/1097748 https://bugzilla.suse.com/1105019 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2813-1: important: Security update for openslp
by opensuse-security＠opensuse.org 24 Sep '18

24 Sep '18

openSUSE Security Update: Security update for openslp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2813-1 Rating: important References: #1090638 Cross-References: CVE-2017-17833 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openslp fixes the following issues: - CVE-2017-17833: Prevent heap-related memory corruption issue which may have manifested itself as a denial-of-service or a remote code-execution vulnerability (bsc#1090638) - Prevent out of bounds reads in message parsing This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1040=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): openslp-2.0.0-18.7.1 openslp-debuginfo-2.0.0-18.7.1 openslp-debugsource-2.0.0-18.7.1 openslp-devel-2.0.0-18.7.1 openslp-server-2.0.0-18.7.1 openslp-server-debuginfo-2.0.0-18.7.1 - openSUSE Leap 42.3 (x86_64): openslp-32bit-2.0.0-18.7.1 openslp-debuginfo-32bit-2.0.0-18.7.1 References: https://www.suse.com/security/cve/CVE-2017-17833.html https://bugzilla.suse.com/1090638 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2811-1: moderate: Security update for ImageMagick
by opensuse-security＠opensuse.org 24 Sep '18

24 Sep '18

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2811-1 Rating: moderate References: #1102003 #1102004 #1102005 #1102007 #1105592 #1106855 #1106858 Cross-References: CVE-2018-14434 CVE-2018-14435 CVE-2018-14436 CVE-2018-14437 CVE-2018-16323 CVE-2018-16329 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has one errata is now available. Description: This update for ImageMagick fixes the following issues: The following security vulnerabilities were fixed: - CVE-2018-16329: Prevent NULL pointer dereference in the GetMagickProperty function leading to DoS (bsc#1106858) - CVE-2018-16323: ReadXBMImage left data uninitialized when processing an XBM file that has a negative pixel value. If the affected code was used as a library loaded into a process that includes sensitive information, that information sometimes can be leaked via the image data (bsc#1106855) - CVE-2018-14434: Fixed a memory leak for a colormap in WriteMPCImage (bsc#1102003) - CVE-2018-14435: Fixed a memory leak in DecodeImage in coders/pcd.c (bsc#1102007) - CVE-2018-14436: Fixed a memory leak in ReadMIFFImage in coders/miff.c (bsc#1102005) - CVE-2018-14437: Fixed a memory leak in parse8BIM in coders/meta.c (bsc#1102004) - Disable PS, PS2, PS3, XPS and PDF coders in default policy.xml (bsc#1105592) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1038=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ImageMagick-6.8.8.1-67.1 ImageMagick-debuginfo-6.8.8.1-67.1 ImageMagick-debugsource-6.8.8.1-67.1 ImageMagick-devel-6.8.8.1-67.1 ImageMagick-extra-6.8.8.1-67.1 ImageMagick-extra-debuginfo-6.8.8.1-67.1 libMagick++-6_Q16-3-6.8.8.1-67.1 libMagick++-6_Q16-3-debuginfo-6.8.8.1-67.1 libMagick++-devel-6.8.8.1-67.1 libMagickCore-6_Q16-1-6.8.8.1-67.1 libMagickCore-6_Q16-1-debuginfo-6.8.8.1-67.1 libMagickWand-6_Q16-1-6.8.8.1-67.1 libMagickWand-6_Q16-1-debuginfo-6.8.8.1-67.1 perl-PerlMagick-6.8.8.1-67.1 perl-PerlMagick-debuginfo-6.8.8.1-67.1 - openSUSE Leap 42.3 (x86_64): ImageMagick-devel-32bit-6.8.8.1-67.1 libMagick++-6_Q16-3-32bit-6.8.8.1-67.1 libMagick++-6_Q16-3-debuginfo-32bit-6.8.8.1-67.1 libMagick++-devel-32bit-6.8.8.1-67.1 libMagickCore-6_Q16-1-32bit-6.8.8.1-67.1 libMagickCore-6_Q16-1-debuginfo-32bit-6.8.8.1-67.1 libMagickWand-6_Q16-1-32bit-6.8.8.1-67.1 libMagickWand-6_Q16-1-debuginfo-32bit-6.8.8.1-67.1 - openSUSE Leap 42.3 (noarch): ImageMagick-doc-6.8.8.1-67.1 References: https://www.suse.com/security/cve/CVE-2018-14434.html https://www.suse.com/security/cve/CVE-2018-14435.html https://www.suse.com/security/cve/CVE-2018-14436.html https://www.suse.com/security/cve/CVE-2018-14437.html https://www.suse.com/security/cve/CVE-2018-16323.html https://www.suse.com/security/cve/CVE-2018-16329.html https://bugzilla.suse.com/1102003 https://bugzilla.suse.com/1102004 https://bugzilla.suse.com/1102005 https://bugzilla.suse.com/1102007 https://bugzilla.suse.com/1105592 https://bugzilla.suse.com/1106855 https://bugzilla.suse.com/1106858 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2801-2: moderate: Security update for obs-service-refresh_patches
by opensuse-security＠opensuse.org 22 Sep '18

22 Sep '18

openSUSE Security Update: Security update for obs-service-refresh_patches ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2801-2 Rating: moderate References: #1108189 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for obs-service-refresh_patches fixes the following security issue: - An attacker creating a specially formated archive could have tricked the service in deleting directories that shouldn't be deleted (boo#1108189) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1029=1 Package List: - openSUSE Backports SLE-15 (noarch): obs-service-refresh_patches-0.3.9+git.1537184752.d624424-bp150.3.3.1 References: https://bugzilla.suse.com/1108189 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2810-1: moderate: Security update for aubio
by opensuse-security＠opensuse.org 22 Sep '18

22 Sep '18

openSUSE Security Update: Security update for aubio ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2810-1 Rating: moderate References: #1102359 #1102364 Cross-References: CVE-2018-14522 CVE-2018-14523 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for aubio fixes the following issues: - CVE-2018-14522: Fixed a crash in aubio_pitch_set_unit (bsc#1102359) - CVE-2018-14523: Fixed a buffer overrread resulting in crash or information leakage in new_aubio_pitchyinfft (bsc#1102364) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-883=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): python-aubio-debugsource-0.4.6-bp150.3.3.1 python2-aubio-0.4.6-bp150.3.3.1 python2-aubio-debuginfo-0.4.6-bp150.3.3.1 python3-aubio-0.4.6-bp150.3.3.1 python3-aubio-debuginfo-0.4.6-bp150.3.3.1 - openSUSE Backports SLE-15 (x86_64): aubio-tools-0.4.6-bp150.3.3.1 libaubio-devel-0.4.6-bp150.3.3.1 libaubio5-0.4.6-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-14522.html https://www.suse.com/security/cve/CVE-2018-14523.html https://bugzilla.suse.com/1102359 https://bugzilla.suse.com/1102364 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2723-2: Security update for ffmpeg-4
by opensuse-security＠opensuse.org 22 Sep '18

22 Sep '18

openSUSE Security Update: Security update for ffmpeg-4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2723-2 Rating: low References: #1092241 #1100348 #1105869 Cross-References: CVE-2018-13300 CVE-2018-15822 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for ffmpeg-4 to version 4.0.2 fixes the following issues: These security issues were fixed: - CVE-2018-15822: The flv_write_packet function did not check for an empty audio packet, leading to an assertion failure and DoS (bsc#1105869). - CVE-2018-13300: An improper argument passed to the avpriv_request_sample function may have triggered an out-of-array read while converting a crafted AVI file to MPEG4, leading to a denial of service and possibly an information disclosure (bsc#1100348). These non-security issues were fixed: - Enable webvtt encoders and decoders (boo#1092241). - Build codec2 encoder and decoder, add libcodec2 to enable_decoders and enable_encoders. - Enable mpeg 1 and 2 encoders. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1004=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): ffmpeg-4-debugsource-4.0.2-bp150.3.3.1 ffmpeg-4-libavcodec-devel-4.0.2-bp150.3.3.1 ffmpeg-4-libavdevice-devel-4.0.2-bp150.3.3.1 ffmpeg-4-libavfilter-devel-4.0.2-bp150.3.3.1 ffmpeg-4-libavformat-devel-4.0.2-bp150.3.3.1 ffmpeg-4-libavresample-devel-4.0.2-bp150.3.3.1 ffmpeg-4-libavutil-devel-4.0.2-bp150.3.3.1 ffmpeg-4-libpostproc-devel-4.0.2-bp150.3.3.1 ffmpeg-4-libswresample-devel-4.0.2-bp150.3.3.1 ffmpeg-4-libswscale-devel-4.0.2-bp150.3.3.1 ffmpeg-4-private-devel-4.0.2-bp150.3.3.1 libavcodec58-4.0.2-bp150.3.3.1 libavcodec58-debuginfo-4.0.2-bp150.3.3.1 libavdevice58-4.0.2-bp150.3.3.1 libavdevice58-debuginfo-4.0.2-bp150.3.3.1 libavfilter7-4.0.2-bp150.3.3.1 libavfilter7-debuginfo-4.0.2-bp150.3.3.1 libavformat58-4.0.2-bp150.3.3.1 libavformat58-debuginfo-4.0.2-bp150.3.3.1 libavresample4-4.0.2-bp150.3.3.1 libavresample4-debuginfo-4.0.2-bp150.3.3.1 libavutil56-4.0.2-bp150.3.3.1 libavutil56-debuginfo-4.0.2-bp150.3.3.1 libpostproc55-4.0.2-bp150.3.3.1 libpostproc55-debuginfo-4.0.2-bp150.3.3.1 libswresample3-4.0.2-bp150.3.3.1 libswresample3-debuginfo-4.0.2-bp150.3.3.1 libswscale5-4.0.2-bp150.3.3.1 libswscale5-debuginfo-4.0.2-bp150.3.3.1 - openSUSE Backports SLE-15 (aarch64_ilp32): libavcodec58-64bit-4.0.2-bp150.3.3.1 libavcodec58-64bit-debuginfo-4.0.2-bp150.3.3.1 libavdevice58-64bit-4.0.2-bp150.3.3.1 libavdevice58-64bit-debuginfo-4.0.2-bp150.3.3.1 libavfilter7-64bit-4.0.2-bp150.3.3.1 libavfilter7-64bit-debuginfo-4.0.2-bp150.3.3.1 libavformat58-64bit-4.0.2-bp150.3.3.1 libavformat58-64bit-debuginfo-4.0.2-bp150.3.3.1 libavresample4-64bit-4.0.2-bp150.3.3.1 libavresample4-64bit-debuginfo-4.0.2-bp150.3.3.1 libavutil56-64bit-4.0.2-bp150.3.3.1 libavutil56-64bit-debuginfo-4.0.2-bp150.3.3.1 libpostproc55-64bit-4.0.2-bp150.3.3.1 libpostproc55-64bit-debuginfo-4.0.2-bp150.3.3.1 libswresample3-64bit-4.0.2-bp150.3.3.1 libswresample3-64bit-debuginfo-4.0.2-bp150.3.3.1 libswscale5-64bit-4.0.2-bp150.3.3.1 libswscale5-64bit-debuginfo-4.0.2-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-13300.html https://www.suse.com/security/cve/CVE-2018-15822.html https://bugzilla.suse.com/1092241 https://bugzilla.suse.com/1100348 https://bugzilla.suse.com/1105869 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2809-1: important: Security update for python-Django1
by opensuse-security＠opensuse.org 22 Sep '18

22 Sep '18

openSUSE Security Update: Security update for python-Django1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2809-1 Rating: important References: #1102680 Cross-References: CVE-2018-14574 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-Django1 to version 1.11.15 fixes the following issues: The following security vulnerability was fixed: - CVE-2018-14574: Fixed an open redirect possibility in CommonMiddleware (boo#1102680) The following other bugs were fixed: - Fixed WKBWriter.write() and write_hex() for empty polygons on GEOS 3.6.1+ - Fixed a regression where altering a field with a unique constraint may drop and rebuild more foreign keys than necessary - Fixed crashes in django.contrib.admindocs when a view is a callable object, such as django.contrib.syndication.views.Feed - Fixed a regression where QuerySet.values() or values_list() after combining an annotated and unannotated queryset with union(), difference(), or intersection() crashed due to mismatching columns This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-884=1 Package List: - openSUSE Backports SLE-15 (noarch): python2-Django1-1.11.15-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-14574.html https://bugzilla.suse.com/1102680 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2797-2: critical: Security update for hylafax+
by opensuse-security＠opensuse.org 22 Sep '18

22 Sep '18

openSUSE Security Update: Security update for hylafax+ ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2797-2 Rating: critical References: #1109084 Cross-References: CVE-2018-17141 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for hylafax+ fixes the following issues: Security issues fixed in 5.6.1: - CVE-2018-17141: multiple vulnerabilities affecting fax page reception in JPEG format Specially crafted input may have allowed remote execution of arbitrary code (boo#1109084) Additionally, this update also contains all upstream corrections and bugfixes in the 5.6.1 version, including: - fix RFC2047 encoding by notify - add jobcontrol PageSize feature - don't wait forever after +FRH:3 - fix faxmail transition between a message and external types - avoid pagehandling from introducing some unnecessary EOM signals - improve proxy connection error handling and logging - add initial ModemGroup limits feature - pass the user's uid onto the session log file for sent faxes - improve job waits to minimize triggers - add ProxyTaglineFormat and ProxyTSI features Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1027=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): hylafax+-5.6.1-bp150.4.3.1 hylafax+-client-5.6.1-bp150.4.3.1 hylafax+-client-debuginfo-5.6.1-bp150.4.3.1 hylafax+-debuginfo-5.6.1-bp150.4.3.1 hylafax+-debugsource-5.6.1-bp150.4.3.1 libfaxutil5_6_1-5.6.1-bp150.4.3.1 libfaxutil5_6_1-debuginfo-5.6.1-bp150.4.3.1 References: https://www.suse.com/security/cve/CVE-2018-17141.html https://bugzilla.suse.com/1109084 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2664-2: important: Security update for chromium
by opensuse-security＠opensuse.org 22 Sep '18

22 Sep '18

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2664-2 Rating: important References: #1106341 #1107235 Cross-References: CVE-2017-15430 CVE-2018-16065 CVE-2018-16066 CVE-2018-16067 CVE-2018-16068 CVE-2018-16069 CVE-2018-16070 CVE-2018-16071 CVE-2018-16073 CVE-2018-16074 CVE-2018-16075 CVE-2018-16076 CVE-2018-16077 CVE-2018-16078 CVE-2018-16079 CVE-2018-16080 CVE-2018-16081 CVE-2018-16082 CVE-2018-16083 CVE-2018-16084 CVE-2018-16085 CVE-2018-16086 CVE-2018-16087 CVE-2018-16088 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes 24 vulnerabilities is now available. Description: This update for Chromium to version 69.0.3497.81 fixes multiple issues. Security issues fixed (boo#1107235): - CVE-2018-16065: Out of bounds write in V8 - CVE-2018-16066:Out of bounds read in Blink - CVE-2018-16067: Out of bounds read in WebAudio - CVE-2018-16068: Out of bounds write in Mojo - CVE-2018-16069:Out of bounds read in SwiftShader - CVE-2018-16070: Integer overflow in Skia - CVE-2018-16071: Use after free in WebRTC - CVE-2018-16073: Site Isolation bypass after tab restore - CVE-2018-16074: Site Isolation bypass using Blob URLS - Out of bounds read in Little-CMS - CVE-2018-16075: Local file access in Blink - CVE-2018-16076: Out of bounds read in PDFium - CVE-2018-16077: Content security policy bypass in Blink - CVE-2018-16078: Credit card information leak in Autofill - CVE-2018-16079: URL spoof in permission dialogs - CVE-2018-16080: URL spoof in full screen mode - CVE-2018-16081: Local file access in DevTools - CVE-2018-16082: Stack buffer overflow in SwiftShader - CVE-2018-16083: Out of bounds read in WebRTC - CVE-2018-16084: User confirmation bypass in external protocol handling - CVE-2018-16085: Use after free in Memory Instrumentation - CVE-2017-15430: Unsafe navigation in Chromecast (boo#1106341) - CVE-2018-16086: Script injection in New Tab Page - CVE-2018-16087: Multiple download restriction bypass - CVE-2018-16088: User gesture requirement bypass The re2 regular expression library was updated to the current version 2018-09-01. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-979=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): libre2-0-20180901-bp150.3.3.1 libre2-0-debuginfo-20180901-bp150.3.3.1 re2-debugsource-20180901-bp150.3.3.1 re2-devel-20180901-bp150.3.3.1 - openSUSE Backports SLE-15 (aarch64 x86_64): chromedriver-69.0.3497.81-bp150.2.4.1 chromedriver-debuginfo-69.0.3497.81-bp150.2.4.1 chromium-69.0.3497.81-bp150.2.4.1 chromium-debuginfo-69.0.3497.81-bp150.2.4.1 chromium-debugsource-69.0.3497.81-bp150.2.4.1 - openSUSE Backports SLE-15 (aarch64_ilp32): libre2-0-64bit-20180901-bp150.3.3.1 libre2-0-64bit-debuginfo-20180901-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2017-15430.html https://www.suse.com/security/cve/CVE-2018-16065.html https://www.suse.com/security/cve/CVE-2018-16066.html https://www.suse.com/security/cve/CVE-2018-16067.html https://www.suse.com/security/cve/CVE-2018-16068.html https://www.suse.com/security/cve/CVE-2018-16069.html https://www.suse.com/security/cve/CVE-2018-16070.html https://www.suse.com/security/cve/CVE-2018-16071.html https://www.suse.com/security/cve/CVE-2018-16073.html https://www.suse.com/security/cve/CVE-2018-16074.html https://www.suse.com/security/cve/CVE-2018-16075.html https://www.suse.com/security/cve/CVE-2018-16076.html https://www.suse.com/security/cve/CVE-2018-16077.html https://www.suse.com/security/cve/CVE-2018-16078.html https://www.suse.com/security/cve/CVE-2018-16079.html https://www.suse.com/security/cve/CVE-2018-16080.html https://www.suse.com/security/cve/CVE-2018-16081.html https://www.suse.com/security/cve/CVE-2018-16082.html https://www.suse.com/security/cve/CVE-2018-16083.html https://www.suse.com/security/cve/CVE-2018-16084.html https://www.suse.com/security/cve/CVE-2018-16085.html https://www.suse.com/security/cve/CVE-2018-16086.html https://www.suse.com/security/cve/CVE-2018-16087.html https://www.suse.com/security/cve/CVE-2018-16088.html https://bugzilla.suse.com/1106341 https://bugzilla.suse.com/1107235 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2516-2: important: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 22 Sep '18

22 Sep '18

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2516-2 Rating: important References: #1105592 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for GraphicsMagick fixes the following issues: Security issue fixed: - Disable PS, PS2, PS3 and PDF coders by default, remove gs calls from delegates.mgk (boo#1105592) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-937=1 Package List: - openSUSE Backports SLE-15 (x86_64): GraphicsMagick-1.3.29-bp150.2.3.1 GraphicsMagick-debuginfo-1.3.29-bp150.2.3.1 GraphicsMagick-debugsource-1.3.29-bp150.2.3.1 GraphicsMagick-devel-1.3.29-bp150.2.3.1 libGraphicsMagick++-Q16-12-1.3.29-bp150.2.3.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.29-bp150.2.3.1 libGraphicsMagick++-devel-1.3.29-bp150.2.3.1 libGraphicsMagick-Q16-3-1.3.29-bp150.2.3.1 libGraphicsMagick-Q16-3-debuginfo-1.3.29-bp150.2.3.1 libGraphicsMagick3-config-1.3.29-bp150.2.3.1 libGraphicsMagickWand-Q16-2-1.3.29-bp150.2.3.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.29-bp150.2.3.1 perl-GraphicsMagick-1.3.29-bp150.2.3.1 perl-GraphicsMagick-debuginfo-1.3.29-bp150.2.3.1 References: https://bugzilla.suse.com/1105592 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2742-2: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 22 Sep '18

22 Sep '18

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2742-2 Rating: low References: #1107604 #1107609 Cross-References: CVE-2018-16644 CVE-2018-16645 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for GraphicsMagick fixes the following issues: - CVE-2018-16644: Added missing check for length in the functions ReadDCMImage and ReadPICTImage, which allowed remote attackers to cause a denial of service via a crafted image (bsc#1107609) - CVE-2018-16645: Prevent excessive memory allocation issue in the functions ReadBMPImage and ReadDIBImage, which allowed remote attackers to cause a denial of service via a crafted image file (bsc#1107604) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1020=1 Package List: - openSUSE Backports SLE-15 (x86_64): GraphicsMagick-1.3.29-bp150.2.6.1 GraphicsMagick-debuginfo-1.3.29-bp150.2.6.1 GraphicsMagick-debugsource-1.3.29-bp150.2.6.1 GraphicsMagick-devel-1.3.29-bp150.2.6.1 libGraphicsMagick++-Q16-12-1.3.29-bp150.2.6.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.29-bp150.2.6.1 libGraphicsMagick++-devel-1.3.29-bp150.2.6.1 libGraphicsMagick-Q16-3-1.3.29-bp150.2.6.1 libGraphicsMagick-Q16-3-debuginfo-1.3.29-bp150.2.6.1 libGraphicsMagick3-config-1.3.29-bp150.2.6.1 libGraphicsMagickWand-Q16-2-1.3.29-bp150.2.6.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.29-bp150.2.6.1 perl-GraphicsMagick-1.3.29-bp150.2.6.1 perl-GraphicsMagick-debuginfo-1.3.29-bp150.2.6.1 References: https://www.suse.com/security/cve/CVE-2018-16644.html https://www.suse.com/security/cve/CVE-2018-16645.html https://bugzilla.suse.com/1107604 https://bugzilla.suse.com/1107609 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2728-2: moderate: Security update for chromium
by opensuse-security＠opensuse.org 22 Sep '18

22 Sep '18

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2728-2 Rating: moderate References: #1108114 #1108175 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for Chromium to version 69.0.3497.92 fixes the following issues: Security issues fixed ((boo#1108114): - Function signature mismatch in WebAssembly - URL Spoofing in Omnibox The following tracked packaging issues were fixed: - the chromium package incorrectly provied swiftshader resolvables (boo#1108175) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1005=1 Package List: - openSUSE Backports SLE-15 (aarch64 x86_64): chromedriver-69.0.3497.92-bp150.2.7.1 chromedriver-debuginfo-69.0.3497.92-bp150.2.7.1 chromium-69.0.3497.92-bp150.2.7.1 chromium-debuginfo-69.0.3497.92-bp150.2.7.1 chromium-debugsource-69.0.3497.92-bp150.2.7.1 References: https://bugzilla.suse.com/1108114 https://bugzilla.suse.com/1108175 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2733-2: moderate: Security update for okular
by opensuse-security＠opensuse.org 22 Sep '18

22 Sep '18

openSUSE Security Update: Security update for okular ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2733-2 Rating: moderate References: #1107591 Cross-References: CVE-2018-1000801 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for okular fixes the following security issue: - CVE-2018-1000801: Prevent directory traversal vulnerability in function unpackDocumentArchive could have resulted in arbitrary file creation via a specially crafted Okular archive (bsc#1107591). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1006=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): okular-17.12.3-bp150.3.3.1 okular-debuginfo-17.12.3-bp150.3.3.1 okular-debugsource-17.12.3-bp150.3.3.1 okular-devel-17.12.3-bp150.3.3.1 - openSUSE Backports SLE-15 (noarch): okular-lang-17.12.3-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-1000801.html https://bugzilla.suse.com/1107591 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2807-1: important: Security update for seamonkey
by opensuse-security＠opensuse.org 22 Sep '18

22 Sep '18

openSUSE Security Update: Security update for seamonkey ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2807-1 Rating: important References: #1020631 #1062195 #1076907 #1077291 #1098998 Cross-References: CVE-2018-12359 CVE-2018-12360 CVE-2018-12362 CVE-2018-12363 CVE-2018-12364 CVE-2018-12365 CVE-2018-12366 CVE-2018-5156 CVE-2018-5188 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This update for seamonkey fixes the following issues: Mozilla Seamonkey was updated to 2.49.4: Now uses Gecko 52.9.1esr (boo#1098998). Security issues fixed with MFSA 2018-16 (boo#1098998): * CVE-2018-12359: Buffer overflow using computed size of canvas element * CVE-2018-12360: Use-after-free when using focus() * CVE-2018-12362: Integer overflow in SSSE3 scaler * CVE-2018-5156: Media recorder segmentation fault when track type is changed during capture * CVE-2018-12363: Use-after-free when appending DOM nodes * CVE-2018-12364: CSRF attacks through 307 redirects and NPAPI plugins * CVE-2018-12365: Compromised IPC child process can list local filenames * CVE-2018-12366: Invalid data handling during QCMS transformations * CVE-2018-5188: Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9 Localizations finally included again (boo#1062195) Updated summary and description to more accurately reflect what SeaMonkey is, giving less prominence to the long- discontinued Mozilla Application Suite that many users may no longer be familiar with Update to Seamonkey 2.49.2 * Gecko 52.6esr (including security relevant fixes) (boo#1077291) * fix issue in Composer * With some themes, the menulist- and history-dropmarker didn't show * Scrollbars didn't show the buttons * WebRTC has been disabled by default. It needs an add-on to enable it per site * The active title bar was not visually emphasized Correct requires and provides handling (boo#1076907) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-873=1 Package List: - openSUSE Backports SLE-15 (aarch64 x86_64): seamonkey-2.49.4-bp150.3.3.1 seamonkey-debuginfo-2.49.4-bp150.3.3.1 seamonkey-debugsource-2.49.4-bp150.3.3.1 seamonkey-translations-common-2.49.4-bp150.3.3.1 seamonkey-translations-other-2.49.4-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-12359.html https://www.suse.com/security/cve/CVE-2018-12360.html https://www.suse.com/security/cve/CVE-2018-12362.html https://www.suse.com/security/cve/CVE-2018-12363.html https://www.suse.com/security/cve/CVE-2018-12364.html https://www.suse.com/security/cve/CVE-2018-12365.html https://www.suse.com/security/cve/CVE-2018-12366.html https://www.suse.com/security/cve/CVE-2018-5156.html https://www.suse.com/security/cve/CVE-2018-5188.html https://bugzilla.suse.com/1020631 https://bugzilla.suse.com/1062195 https://bugzilla.suse.com/1076907 https://bugzilla.suse.com/1077291 https://bugzilla.suse.com/1098998 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2525-2: moderate: Security update for phpMyAdmin
by opensuse-security＠opensuse.org 22 Sep '18

22 Sep '18

openSUSE Security Update: Security update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2525-2 Rating: moderate References: #1105726 Cross-References: CVE-2018-15605 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for phpMyAdmin to version 4.8.3 addresses multiple issues. Security issues fixed: - CVE-2018-15605: vulnerability in the file import feature allowed cross-site scripting via importing a specially-crafted file (PMASA-2018-5, boo#1105726) This update also contains a number of upstream bug fixes in the UI and behavior. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-939=1 Package List: - openSUSE Backports SLE-15 (noarch): phpMyAdmin-4.8.3-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-15605.html https://bugzilla.suse.com/1105726 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2521-2: moderate: Security update for nextcloud
by opensuse-security＠opensuse.org 22 Sep '18

22 Sep '18

openSUSE Security Update: Security update for nextcloud ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2521-2 Rating: moderate References: #1105598 Cross-References: CVE-2018-3780 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for nextcloud to version 13.0.5 fixes the following issues: Security issues fixed: - CVE-2018-3780: Fixed a missing sanitization of search results for an autocomplete field that could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names, hence malicious search results could only be crafted by authenticated users. (boo#1105598) Other bugs fixed: - Fix highlighting of the upload drop zone - Apply ldapUserFilter on members of group - Make the DELETION of groups match greedy on the groupID - Add parent index to share table - Log full exception in cron instead of only the message - Properly lock the target file on dav upload when not using part files - LDAP backup server should not be queried when auth fails - Fix filenames in sharing integration tests - Lower log level for quota manipulation cases - Let user set avatar in nextcloud if LDAP provides invalid image data - Improved logging of smb connection errors - Allow admin to disable fetching of avatars as well as a specific attribute - Allow to disable encryption - Update message shown when unsharing a file - Fixed English grammatical error on Settings page. - Request a valid property for DAV opendir - Allow updating the token on session regeneration - Prevent lock values from going negative with memcache backend - Correctly handle users with numeric user ids - Correctly parse the subject parameters for link (un)shares of calendars - Fix "parsing" of email-addresses in comments and chat messages - Sanitize parameters in createSessionToken() while logging - Also retry rename operation on InvalidArgumentException - Improve url detection in comments - Only bind to ldap if configuration for the first server is set - Use download manager from PDF.js to download the file - Fix trying to load removed scripts - Only pull for new messages if the session is allowed to be kept alive - Always push object data - Add prioritization for Talk Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-936=1 Package List: - openSUSE Backports SLE-15 (noarch): nextcloud-13.0.5-bp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-3780.html https://bugzilla.suse.com/1105598 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2806-1: important: Security update for nemo-extensions
by opensuse-security＠opensuse.org 22 Sep '18

22 Sep '18

openSUSE Security Update: Security update for nemo-extensions ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2806-1 Rating: important References: #1084703 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for nemo-extensions fixes the following issues: The following security vulnerability was fixed: - Prevent unprivileged users from adding other users to sambashare (boo#1084703) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-882=1 Package List: - openSUSE Backports SLE-15 (x86_64): nemo-extension-dropbox-3.6.0-bp150.2.3.1 nemo-extension-fileroller-3.6.0-bp150.2.3.1 nemo-extension-gtkhash-3.6.0-bp150.2.3.1 nemo-extension-image-converter-3.6.0-bp150.2.3.1 nemo-extension-preview-3.6.0-bp150.2.3.1 nemo-extension-repairer-3.6.0-bp150.2.3.1 nemo-extension-seahorse-3.6.0-bp150.2.3.1 nemo-extension-share-3.6.0-bp150.2.3.1 python-nemo-3.6.0-bp150.2.3.1 - openSUSE Backports SLE-15 (noarch): nemo-extension-audio-tab-3.6.0-bp150.2.3.1 nemo-extension-compare-3.6.0-bp150.2.3.1 nemo-extension-emblems-3.6.0-bp150.2.3.1 nemo-extension-pastebin-3.6.0-bp150.2.3.1 nemo-extension-rabbitvcs-3.6.0-bp150.2.3.1 nemo-extension-terminal-3.6.0-bp150.2.3.1 References: https://bugzilla.suse.com/1084703 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2488-2: moderate: Security update for python-Django
by opensuse-security＠opensuse.org 22 Sep '18

22 Sep '18

openSUSE Security Update: Security update for python-Django ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2488-2 Rating: moderate References: #1102680 Cross-References: CVE-2018-14574 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-Django to version 2.08 fixes the following issues: The following security vulnerability was fixed: - CVE-2018-14574: Fixed an redirection vulnerability in CommonMiddleware (boo#1102680) The following other bugs were fixed: - Fixed a regression in Django 2.0.7 that broke the regex lookup on MariaDB - Fixed a regression where django.template.Template crashed if the template_string argument is lazy - Fixed __regex and __iregex lookups with MySQL - Fixed admin check crash when using a query expression in ModelAdmin.ordering - Fixed admin changelist crash when using a query expression without asc() or desc() in the page’s ordering - Fixed a regression that broke custom template filters that use decorators - Fixed detection of custom URL converters in included pattern - Fixed a regression that added an unnecessary subquery to the GROUP BY clause on MySQL when using a RawSQL annotation - Fixed WKBWriter.write() and write_hex() for empty polygons on GEOS 3.6.1+ - Fixed a regression in Django 1.10 that could result in large memory usage when making edits using ModelAdmin.list_editable - Corrected the import paths that inspectdb generates for django.contrib.postgres fields - Fixed crashes in django.contrib.admindocs when a view is a callable object, such as django.contrib.syndication.views.Feed - Fixed a regression in Django 1.11.12 where QuerySet.values() or values_list() after combining an annotated and unannotated queryset with union(), difference(), or intersection() crashed due to mismatching columns Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-914=1 Package List: - openSUSE Backports SLE-15 (noarch): python3-Django-2.0.8-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-14574.html https://bugzilla.suse.com/1102680 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2754-2: moderate: Security update for chromium
by opensuse-security＠opensuse.org 22 Sep '18

22 Sep '18

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2754-2 Rating: moderate References: #1108774 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for Chromium to version 69.0.3497.100 fixes the following issues: - Security relevant fixes from internal audits, fuzzing and other initiatives (boo#boo#1108774) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1021=1 Package List: - openSUSE Backports SLE-15 (aarch64 x86_64): chromedriver-69.0.3497.100-bp150.2.10.1 chromedriver-debuginfo-69.0.3497.100-bp150.2.10.1 chromium-69.0.3497.100-bp150.2.10.1 chromium-debuginfo-69.0.3497.100-bp150.2.10.1 chromium-debugsource-69.0.3497.100-bp150.2.10.1 References: https://bugzilla.suse.com/1108774 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2801-1: moderate: Security update for obs-service-refresh_patches
by opensuse-security＠opensuse.org 21 Sep '18

21 Sep '18

openSUSE Security Update: Security update for obs-service-refresh_patches ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2801-1 Rating: moderate References: #1108189 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for obs-service-refresh_patches fixes the following security issue: - An attacker creating a specially formated archive could have tricked the service in deleting directories that shouldn't be deleted (boo#1108189) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1029=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1029=1 Package List: - openSUSE Leap 42.3 (noarch): obs-service-refresh_patches-0.3.9+git.1537184752.d624424-9.3.1 - openSUSE Leap 15.0 (noarch): obs-service-refresh_patches-0.3.9+git.1537184752.d624424-lp150.2.3.1 References: https://bugzilla.suse.com/1108189 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2797-1: critical: Security update for hylafax+
by opensuse-security＠opensuse.org 21 Sep '18

21 Sep '18

openSUSE Security Update: Security update for hylafax+ ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2797-1 Rating: critical References: #1109084 Cross-References: CVE-2018-17141 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for hylafax+ fixes the following issues: Security issues fixed in 5.6.1: - CVE-2018-17141: multiple vulnerabilities affecting fax page reception in JPEG format Specially crafted input may have allowed remote execution of arbitrary code (boo#1109084) Additionally, this update also contains all upstream corrections and bugfixes in the 5.6.1 version, including: - fix RFC2047 encoding by notify - add jobcontrol PageSize feature - don't wait forever after +FRH:3 - fix faxmail transition between a message and external types - avoid pagehandling from introducing some unnecessary EOM signals - improve proxy connection error handling and logging - add initial ModemGroup limits feature - pass the user's uid onto the session log file for sent faxes - improve job waits to minimize triggers - add ProxyTaglineFormat and ProxyTSI features Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1027=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1027=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): hylafax+-5.6.1-15.1 hylafax+-client-5.6.1-15.1 hylafax+-client-debuginfo-5.6.1-15.1 hylafax+-debuginfo-5.6.1-15.1 hylafax+-debugsource-5.6.1-15.1 libfaxutil5_6_1-5.6.1-15.1 libfaxutil5_6_1-debuginfo-5.6.1-15.1 - openSUSE Leap 15.0 (x86_64): hylafax+-5.6.1-lp150.5.6.1 hylafax+-client-5.6.1-lp150.5.6.1 hylafax+-client-debuginfo-5.6.1-lp150.5.6.1 hylafax+-debuginfo-5.6.1-lp150.5.6.1 hylafax+-debugsource-5.6.1-lp150.5.6.1 libfaxutil5_6_1-5.6.1-lp150.5.6.1 libfaxutil5_6_1-debuginfo-5.6.1-lp150.5.6.1 References: https://www.suse.com/security/cve/CVE-2018-17141.html https://bugzilla.suse.com/1109084 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2790-1: moderate: Security update for pango
by opensuse-security＠opensuse.org 21 Sep '18

21 Sep '18

openSUSE Security Update: Security update for pango ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2790-1 Rating: moderate References: #1103877 Cross-References: CVE-2018-15120 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for pango fixes the following issue: Security issue fixed: - CVE-2018-15120: Fixed a denial of service when parsing emoji (bsc#1103877) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1026=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libpango-1_0-0-1.40.14-lp150.2.3.1 libpango-1_0-0-debuginfo-1.40.14-lp150.2.3.1 pango-debugsource-1.40.14-lp150.2.3.1 pango-devel-1.40.14-lp150.2.3.1 pango-tools-1.40.14-lp150.2.3.1 pango-tools-debuginfo-1.40.14-lp150.2.3.1 typelib-1_0-Pango-1_0-1.40.14-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libpango-1_0-0-32bit-1.40.14-lp150.2.3.1 libpango-1_0-0-32bit-debuginfo-1.40.14-lp150.2.3.1 pango-devel-32bit-1.40.14-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-15120.html https://bugzilla.suse.com/1103877 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2781-1: moderate: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 21 Sep '18

21 Sep '18

openSUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2781-1 Rating: moderate References: #1101999 #1104169 Cross-References: CVE-2018-12911 CVE-2018-4261 CVE-2018-4262 CVE-2018-4263 CVE-2018-4264 CVE-2018-4265 CVE-2018-4266 CVE-2018-4267 CVE-2018-4270 CVE-2018-4271 CVE-2018-4272 CVE-2018-4273 CVE-2018-4278 CVE-2018-4284 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for webkit2gtk3 to version 2.20.5 fixes the following issues: Security issue fixed: - CVE-2018-12911: Fix off-by-one in xdg_mime_get_simple_globs (bsc#1101999). - CVE-2018-4261, CVE-2018-4262, CVE-2018-4263, CVE-2018-4264, CVE-2018-4265, CVE-2018-4267, CVE-2018-4272, CVE-2018-4284: Processing maliciously crafted web content may lead to arbitrary code execution. A memory corruption issue was addressed with improved memory handling. - CVE-2018-4266: A malicious website may be able to cause a denial of service. A race condition was addressed with additional validation. - CVE-2018-4270, CVE-2018-4271, CVE-2018-4273: Processing maliciously crafted web content may lead to an unexpected application crash. A memory corruption issue was addressed with improved input validation. - CVE-2018-4278: A malicious website may exfiltrate audio data cross-origin. Sound fetched through audio elements may be exfiltrated cross-origin. This issue was addressed with improved audio taint tracking. Other bugs fixed: - Fix rendering artifacts in some web sites due to a bug introduced in 2.20.4. - Fix a crash when leaving accelerated compositing mode. - Fix non-deterministic build failure due to missing JavaScriptCore/JSContextRef.h. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1025=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libjavascriptcoregtk-4_0-18-2.20.5-lp150.2.6.1 libjavascriptcoregtk-4_0-18-debuginfo-2.20.5-lp150.2.6.1 libwebkit2gtk-4_0-37-2.20.5-lp150.2.6.1 libwebkit2gtk-4_0-37-debuginfo-2.20.5-lp150.2.6.1 typelib-1_0-JavaScriptCore-4_0-2.20.5-lp150.2.6.1 typelib-1_0-WebKit2-4_0-2.20.5-lp150.2.6.1 typelib-1_0-WebKit2WebExtension-4_0-2.20.5-lp150.2.6.1 webkit-jsc-4-2.20.5-lp150.2.6.1 webkit-jsc-4-debuginfo-2.20.5-lp150.2.6.1 webkit2gtk-4_0-injected-bundles-2.20.5-lp150.2.6.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.20.5-lp150.2.6.1 webkit2gtk3-debugsource-2.20.5-lp150.2.6.1 webkit2gtk3-devel-2.20.5-lp150.2.6.1 webkit2gtk3-plugin-process-gtk2-2.20.5-lp150.2.6.1 webkit2gtk3-plugin-process-gtk2-debuginfo-2.20.5-lp150.2.6.1 - openSUSE Leap 15.0 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.20.5-lp150.2.6.1 libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.20.5-lp150.2.6.1 libwebkit2gtk-4_0-37-32bit-2.20.5-lp150.2.6.1 libwebkit2gtk-4_0-37-32bit-debuginfo-2.20.5-lp150.2.6.1 - openSUSE Leap 15.0 (noarch): libwebkit2gtk3-lang-2.20.5-lp150.2.6.1 References: https://www.suse.com/security/cve/CVE-2018-12911.html https://www.suse.com/security/cve/CVE-2018-4261.html https://www.suse.com/security/cve/CVE-2018-4262.html https://www.suse.com/security/cve/CVE-2018-4263.html https://www.suse.com/security/cve/CVE-2018-4264.html https://www.suse.com/security/cve/CVE-2018-4265.html https://www.suse.com/security/cve/CVE-2018-4266.html https://www.suse.com/security/cve/CVE-2018-4267.html https://www.suse.com/security/cve/CVE-2018-4270.html https://www.suse.com/security/cve/CVE-2018-4271.html https://www.suse.com/security/cve/CVE-2018-4272.html https://www.suse.com/security/cve/CVE-2018-4273.html https://www.suse.com/security/cve/CVE-2018-4278.html https://www.suse.com/security/cve/CVE-2018-4284.html https://bugzilla.suse.com/1101999 https://bugzilla.suse.com/1104169 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2764-1: Security update for exempi
by opensuse-security＠opensuse.org 20 Sep '18

20 Sep '18

openSUSE Security Update: Security update for exempi ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2764-1 Rating: low References: #1085583 #1085584 #1085589 Cross-References: CVE-2017-18233 CVE-2017-18236 CVE-2017-18238 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for exempi fixes the following security issue: - CVE-2017-18236: The ASF_Support::ReadHeaderObject function allowed remote attackers to cause a denial of service (infinite loop) via a crafted .asf file (bsc#1085589) - CVE-2017-18233: Prevent integer overflow in the Chunk class that allowed remote attackers to cause a denial of service (infinite loop) via crafted XMP data in a .avi file (bsc#1085584) - CVE-2017-18238: The TradQT_Manager::ParseCachedBoxes function allowed remote attackers to cause a denial of service (infinite loop) via crafted XMP data in a .qt file (bsc#1085583) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1022=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): exempi-debugsource-2.2.2-6.8.1 exempi-tools-2.2.2-6.8.1 exempi-tools-debuginfo-2.2.2-6.8.1 libexempi-devel-2.2.2-6.8.1 libexempi3-2.2.2-6.8.1 libexempi3-debuginfo-2.2.2-6.8.1 - openSUSE Leap 42.3 (x86_64): libexempi3-32bit-2.2.2-6.8.1 libexempi3-debuginfo-32bit-2.2.2-6.8.1 References: https://www.suse.com/security/cve/CVE-2017-18233.html https://www.suse.com/security/cve/CVE-2017-18236.html https://www.suse.com/security/cve/CVE-2017-18238.html https://bugzilla.suse.com/1085583 https://bugzilla.suse.com/1085584 https://bugzilla.suse.com/1085589 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2754-1: moderate: Security update for chromium
by opensuse-security＠opensuse.org 19 Sep '18

19 Sep '18

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2754-1 Rating: moderate References: #1108774 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for Chromium to version 69.0.3497.100 fixes the following issues: - Security relevant fixes from internal audits, fuzzing and other initiatives (boo#boo#1108774) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1021=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1021=1 Package List: - openSUSE Leap 42.3 (x86_64): chromedriver-69.0.3497.100-174.1 chromedriver-debuginfo-69.0.3497.100-174.1 chromium-69.0.3497.100-174.1 chromium-debuginfo-69.0.3497.100-174.1 chromium-debugsource-69.0.3497.100-174.1 - openSUSE Leap 15.0 (x86_64): chromedriver-69.0.3497.100-lp150.2.16.1 chromedriver-debuginfo-69.0.3497.100-lp150.2.16.1 chromium-69.0.3497.100-lp150.2.16.1 chromium-debuginfo-69.0.3497.100-lp150.2.16.1 chromium-debugsource-69.0.3497.100-lp150.2.16.1 References: https://bugzilla.suse.com/1108774 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2753-1: moderate: Security update for chromium
by opensuse-security＠opensuse.org 19 Sep '18

19 Sep '18

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2753-1 Rating: moderate References: #1108774 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for Chromium to version 69.0.3497.100 fixes the following issues: - Security relevant fixes from internal audits, fuzzing and other initiatives (boo#boo#1108774) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-1021=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-69.0.3497.100-71.1 chromedriver-debuginfo-69.0.3497.100-71.1 chromium-69.0.3497.100-71.1 chromium-debuginfo-69.0.3497.100-71.1 chromium-debugsource-69.0.3497.100-71.1 References: https://bugzilla.suse.com/1108774 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2742-1: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 17 Sep '18

17 Sep '18

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2742-1 Rating: low References: #1107604 #1107609 Cross-References: CVE-2018-16644 CVE-2018-16645 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for GraphicsMagick fixes the following issues: - CVE-2018-16644: Added missing check for length in the functions ReadDCMImage and ReadPICTImage, which allowed remote attackers to cause a denial of service via a crafted image (bsc#1107609) - CVE-2018-16645: Prevent excessive memory allocation issue in the functions ReadBMPImage and ReadDIBImage, which allowed remote attackers to cause a denial of service via a crafted image file (bsc#1107604) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1020=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1020=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): GraphicsMagick-1.3.25-105.1 GraphicsMagick-debuginfo-1.3.25-105.1 GraphicsMagick-debugsource-1.3.25-105.1 GraphicsMagick-devel-1.3.25-105.1 libGraphicsMagick++-Q16-12-1.3.25-105.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.25-105.1 libGraphicsMagick++-devel-1.3.25-105.1 libGraphicsMagick-Q16-3-1.3.25-105.1 libGraphicsMagick-Q16-3-debuginfo-1.3.25-105.1 libGraphicsMagick3-config-1.3.25-105.1 libGraphicsMagickWand-Q16-2-1.3.25-105.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.25-105.1 perl-GraphicsMagick-1.3.25-105.1 perl-GraphicsMagick-debuginfo-1.3.25-105.1 - openSUSE Leap 15.0 (x86_64): GraphicsMagick-1.3.29-lp150.3.12.1 GraphicsMagick-debuginfo-1.3.29-lp150.3.12.1 GraphicsMagick-debugsource-1.3.29-lp150.3.12.1 GraphicsMagick-devel-1.3.29-lp150.3.12.1 libGraphicsMagick++-Q16-12-1.3.29-lp150.3.12.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.29-lp150.3.12.1 libGraphicsMagick++-devel-1.3.29-lp150.3.12.1 libGraphicsMagick-Q16-3-1.3.29-lp150.3.12.1 libGraphicsMagick-Q16-3-debuginfo-1.3.29-lp150.3.12.1 libGraphicsMagick3-config-1.3.29-lp150.3.12.1 libGraphicsMagickWand-Q16-2-1.3.29-lp150.3.12.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.29-lp150.3.12.1 perl-GraphicsMagick-1.3.29-lp150.3.12.1 perl-GraphicsMagick-debuginfo-1.3.29-lp150.3.12.1 References: https://www.suse.com/security/cve/CVE-2018-16644.html https://www.suse.com/security/cve/CVE-2018-16645.html https://bugzilla.suse.com/1107604 https://bugzilla.suse.com/1107609 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2741-1: important: Security update for zsh
by opensuse-security＠opensuse.org 17 Sep '18

17 Sep '18

openSUSE Security Update: Security update for zsh ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2741-1 Rating: important References: #1107294 #1107296 Cross-References: CVE-2018-0502 CVE-2018-13259 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for zsh to version 5.6 fixes the following security issues: - CVE-2018-0502: The beginning of a #! script file was mishandled, potentially leading to an execve call to a program named on the second line (bsc#1107296). - CVE-2018-13259: Shebang lines exceeding 64 characters were truncated, potentially leading to an execve call to a program name that is a substring of the intended one (bsc#1107294). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1018=1 Package List: - openSUSE Leap 15.0 (x86_64): zsh-5.6-lp150.2.6.1 zsh-debuginfo-5.6-lp150.2.6.1 zsh-debugsource-5.6-lp150.2.6.1 zsh-htmldoc-5.6-lp150.2.6.1 References: https://www.suse.com/security/cve/CVE-2018-0502.html https://www.suse.com/security/cve/CVE-2018-13259.html https://bugzilla.suse.com/1107294 https://bugzilla.suse.com/1107296 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2740-1: moderate: Security update for tomcat
by opensuse-security＠opensuse.org 17 Sep '18

17 Sep '18

openSUSE Security Update: Security update for tomcat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2740-1 Rating: moderate References: #1067720 #1093697 #1095472 #1102379 #1102400 #1102410 Cross-References: CVE-2018-1336 CVE-2018-8014 CVE-2018-8034 CVE-2018-8037 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves four vulnerabilities and has two fixes is now available. Description: This update for tomcat to 8.0.53 fixes the following issues: Security issue fixed: - CVE-2018-1336: An improper handing of overflow in the UTF-8 decoder with supplementary characters could have lead to an infinite loop in the decoder causing a Denial of Service (bsc#1102400). - CVE-2018-8034: The host name verification when using TLS with the WebSocket client was missing. It is now enabled by default (bsc#1102379). - CVE-2018-8037: If an async request was completed by the application at the same time as the container triggered the async timeout, a race condition existed that could have resulted in a user seeing a response intended for a different user. An additional issue was present in the NIO and NIO2 connectors that did not correctly track the closure of the connection when an async request was completed by the application and timed out by the container at the same time. This could also have resulted in a user seeing a response intended for another user (bsc#1102410). - CVE-2018-8014: Fix insecure default CORS filter settings (bsc#1093697). Bug fixes: - bsc#1067720: Avoid overwriting of customer's configuration during update. - bsc#1095472: Add Obsoletes for tomcat6 packages. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1019=1 Package List: - openSUSE Leap 42.3 (noarch): tomcat-8.0.53-15.1 tomcat-admin-webapps-8.0.53-15.1 tomcat-docs-webapp-8.0.53-15.1 tomcat-el-3_0-api-8.0.53-15.1 tomcat-embed-8.0.53-15.1 tomcat-javadoc-8.0.53-15.1 tomcat-jsp-2_3-api-8.0.53-15.1 tomcat-jsvc-8.0.53-15.1 tomcat-lib-8.0.53-15.1 tomcat-servlet-3_1-api-8.0.53-15.1 tomcat-webapps-8.0.53-15.1 References: https://www.suse.com/security/cve/CVE-2018-1336.html https://www.suse.com/security/cve/CVE-2018-8014.html https://www.suse.com/security/cve/CVE-2018-8034.html https://www.suse.com/security/cve/CVE-2018-8037.html https://bugzilla.suse.com/1067720 https://bugzilla.suse.com/1093697 https://bugzilla.suse.com/1095472 https://bugzilla.suse.com/1102379 https://bugzilla.suse.com/1102400 https://bugzilla.suse.com/1102410 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2739-1: important: Security update for libzypp, zypper
by opensuse-security＠opensuse.org 17 Sep '18

17 Sep '18

openSUSE Security Update: Security update for libzypp, zypper ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2739-1 Rating: important References: #1036304 #1041178 #1043166 #1045735 #1058515 #1066215 #1070770 #1070851 #1082318 #1084525 #1088037 #1088705 #1091624 #1092413 #1093103 #1096217 #1096617 #1096803 #1099847 #1100028 #1100095 #1100427 #1101349 #1102019 #1102429 #408814 #428822 #907538 Cross-References: CVE-2017-9269 CVE-2018-7685 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has 26 fixes is now available. Description: This update for libzypp, zypper, libsolv provides the following fixes: Security fixes in libzypp: - CVE-2018-7685: PackageProvider: Validate RPMs before caching (bsc#1091624, bsc#1088705) - CVE-2017-9269: Be sure bad packages do not stay in the cache (bsc#1045735) Changes in libzypp: - Update to version 17.6.4 - Automatically fetch repository signing key from gpgkey url (bsc#1088037) - lsof: use '-K i' if lsof supports it (bsc#1099847,bsc#1036304) - Check for not imported keys after multi key import from rpmdb (bsc#1096217) - Flags: make it std=c++14 ready - Ignore /var, /tmp and /proc in zypper ps. (bsc#1096617) - Show GPGME version in log - Adapt to changes in libgpgme11-11.1.0 breaking the signature verification (bsc#1100427) - RepoInfo::provideKey: add report telling where we look for missing keys. - Support listing gpgkey URLs in repo files (bsc#1088037) - Add new report to request user approval for importing a package key - Handle http error 502 Bad Gateway in curl backend (bsc#1070851) - Add filesize check for downloads with known size (bsc#408814) - Removed superfluous space in translation (bsc#1102019) - Prevent the system from sleeping during a commit - RepoManager: Explicitly request repo2solv to generate application pseudo packages. - libzypp-devel should not require cmake (bsc#1101349) - Avoid zombies from ExternalProgram - Update ApiConfig - HardLocksFile: Prevent against empty commit without Target having been been loaded (bsc#1096803) - lsof: use '-K i' if lsof supports it (bsc#1099847) - Add filesize check for downloads with known size (bsc#408814) - Fix detection of metalink downloads and prevent aborting if a metalink file is larger than the expected data file. - Require libsolv-devel >= 0.6.35 during build (fixing bsc#1100095) - Make use of %license macro (bsc#1082318) Security fix in zypper: - CVE-2017-9269: Improve signature check callback messages (bsc#1045735) Changes in zypper: - Always set error status if any nr of unknown repositories are passed to lr and ref (bsc#1093103) - Notify user about unsupported rpm V3 keys in an old rpm database (bsc#1096217) - Detect read only filesystem on system modifying operations (fixes #199) - Use %license (bsc#1082318) - Handle repo aliases containing multiple ':' in the PackageArgs parser (bsc #1041178) - Fix broken display of detailed query results. - Fix broken search for items with a dash. (bsc#907538, bsc#1043166, bsc#1070770) - Disable repository operations when searching installed packages. (bsc#1084525) - Prevent nested calls to exit() if aborted by a signal. (bsc#1092413) - ansi.h: Prevent ESC sequence strings from going out of scope. (bsc#1092413) - Fix some translation errors. - Support listing gpgkey URLs in repo files (bsc#1088037) - Check for root privileges in zypper verify and si (bsc#1058515) - XML <install-summary> attribute `packages-to-change` added (bsc#1102429) - Add expert (allow-*) options to all installer commands (bsc#428822) - Sort search results by multiple columns (bsc#1066215) - man: Strengthen that `--config FILE' affects zypper.conf, not zypp.conf (bsc#1100028) - Set error status if repositories passed to lr and ref are not known (bsc#1093103) - Do not override table style in search - Fix out of bound read in MbsIterator - Add --supplements switch to search and info - Add setter functions for zypp cache related config values to ZConfig Changes in libsolv: - convert repo2solv.sh script into a binary tool - Make use of %license macro (bsc#1082318) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1017=1 Package List: - openSUSE Leap 15.0 (x86_64): libsolv-debuginfo-0.6.35-lp150.2.3.1 libsolv-debugsource-0.6.35-lp150.2.3.1 libsolv-demo-0.6.35-lp150.2.3.1 libsolv-demo-debuginfo-0.6.35-lp150.2.3.1 libsolv-devel-0.6.35-lp150.2.3.1 libsolv-devel-debuginfo-0.6.35-lp150.2.3.1 libsolv-tools-0.6.35-lp150.2.3.1 libsolv-tools-debuginfo-0.6.35-lp150.2.3.1 libzypp-17.6.4-lp150.2.3.1 libzypp-debuginfo-17.6.4-lp150.2.3.1 libzypp-debugsource-17.6.4-lp150.2.3.1 libzypp-devel-17.6.4-lp150.2.3.1 libzypp-devel-doc-17.6.4-lp150.2.3.1 perl-solv-0.6.35-lp150.2.3.1 perl-solv-debuginfo-0.6.35-lp150.2.3.1 python-solv-0.6.35-lp150.2.3.1 python-solv-debuginfo-0.6.35-lp150.2.3.1 python3-solv-0.6.35-lp150.2.3.1 python3-solv-debuginfo-0.6.35-lp150.2.3.1 ruby-solv-0.6.35-lp150.2.3.1 ruby-solv-debuginfo-0.6.35-lp150.2.3.1 zypper-1.14.10-lp150.2.3.1 zypper-debuginfo-1.14.10-lp150.2.3.1 zypper-debugsource-1.14.10-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): zypper-aptitude-1.14.10-lp150.2.3.1 zypper-log-1.14.10-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2017-9269.html https://www.suse.com/security/cve/CVE-2018-7685.html https://bugzilla.suse.com/1036304 https://bugzilla.suse.com/1041178 https://bugzilla.suse.com/1043166 https://bugzilla.suse.com/1045735 https://bugzilla.suse.com/1058515 https://bugzilla.suse.com/1066215 https://bugzilla.suse.com/1070770 https://bugzilla.suse.com/1070851 https://bugzilla.suse.com/1082318 https://bugzilla.suse.com/1084525 https://bugzilla.suse.com/1088037 https://bugzilla.suse.com/1088705 https://bugzilla.suse.com/1091624 https://bugzilla.suse.com/1092413 https://bugzilla.suse.com/1093103 https://bugzilla.suse.com/1096217 https://bugzilla.suse.com/1096617 https://bugzilla.suse.com/1096803 https://bugzilla.suse.com/1099847 https://bugzilla.suse.com/1100028 https://bugzilla.suse.com/1100095 https://bugzilla.suse.com/1100427 https://bugzilla.suse.com/1101349 https://bugzilla.suse.com/1102019 https://bugzilla.suse.com/1102429 https://bugzilla.suse.com/408814 https://bugzilla.suse.com/428822 https://bugzilla.suse.com/907538 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2738-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 16 Sep '18

16 Sep '18

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2738-1 Rating: important References: #1012382 #1015342 #1015343 #1017967 #1019695 #1019699 #1020412 #1021121 #1022604 #1024361 #1024365 #1024376 #1027968 #1030552 #1031492 #1033962 #1042286 #1048317 #1050431 #1053685 #1055014 #1056596 #1062604 #1063646 #1064232 #1065364 #1066223 #1068032 #1068075 #1069138 #1078921 #1080157 #1083663 #1085042 #1085536 #1085539 #1087092 #1089066 #1090888 #1091171 #1091860 #1092903 #1096254 #1096748 #1097105 #1098253 #1098822 #1099597 #1099810 #1099832 #1099922 #1099999 #1100000 #1100001 #1100132 #1101822 #1102346 #1102486 #1102517 #1102715 #1102797 #1104485 #1104683 #1104897 #1105271 #1105292 #1105296 #1105322 #1105323 #1105392 #1105396 #1105524 #1105536 #1105769 #1106016 #1106105 #1106185 #1106191 #1106229 #1106271 #1106275 #1106276 #1106278 #1106281 #1106283 #1106369 #1106509 #1106511 #1106697 #1106929 #1106934 #1106995 #1107060 #1107078 #1107319 #1107320 #1107689 #1107735 #1107937 #1107966 #963575 #966170 #966172 #969470 #969476 #969477 #970506 Cross-References: CVE-2018-10902 CVE-2018-10938 CVE-2018-10940 CVE-2018-1128 CVE-2018-1129 CVE-2018-12896 CVE-2018-13093 CVE-2018-13094 CVE-2018-13095 CVE-2018-15572 CVE-2018-16658 CVE-2018-6554 CVE-2018-6555 CVE-2018-9363 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves 14 vulnerabilities and has 93 fixes is now available. Description: The openSUSE Leap 42.3 kernel was updated to 4.4.155 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-13093: Prevent NULL pointer dereference and panic in lookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a corrupted xfs image. This occured because of a lack of proper validation that cached inodes are free during allocation (bnc#1100001). - CVE-2018-13095: Prevent denial of service (memory corruption and BUG) that could have occured for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork (bnc#1099999). - CVE-2018-13094: Prevent OOPS that might have occured for a corrupted xfs image after xfs_da_shrink_inode() is called with a NULL bp (bnc#1100000). - CVE-2018-12896: Prevent integer overflow in the POSIX timer code is caused by the way the overrun accounting works. Depending on interval and expiry time values, the overrun could have been larger than INT_MAX, but the accounting is int based. This basically made the accounting values, which are visible to user space via timer_getoverrun(2) and siginfo::si_overrun, random. For example, a local user could have caused a denial of service (signed integer overflow) via crafted mmap, futex, timer_create, and timer_settime system calls (bnc#1099922). - CVE-2018-16658: Prevent information leak in cdrom_ioctl_drive_status that could have been used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking (bnc#1107689). - CVE-2018-10940: The cdrom_ioctl_media_changed function allowed local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory (bsc#1092903). - CVE-2018-6555: The irda_setsockopt function allowed local users to cause a denial of service (ias_object use-after-free and system crash) or possibly have unspecified other impact via an AF_IRDA socket (bnc#1106511). - CVE-2018-6554: Prevent memory leak in the irda_bind function that allowed local users to cause a denial of service (memory consumption) by repeatedly binding an AF_IRDA socket (bnc#1106509). - CVE-2018-1129: A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol (bnc#1096748). - CVE-2018-1128: It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packets on network can use this vulnerability to authenticate with ceph service and perform actions allowed by ceph service (bnc#1096748). - CVE-2018-10938: A crafted network packet sent remotely by an attacker could have forced the kernel to enter an infinite loop in the cipso_v4_optptr() function leading to a denial-of-service (bnc#1106016). - CVE-2018-15572: The spectre_v2_select_mitigation function did not always fill RSB upon a context switch, which made it easier for attackers to conduct userspace-userspace spectreRSB attacks (bnc#1102517). - CVE-2018-10902: The raw midi kernel driver did not protect against concurrent access which lead to a double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status(), allowing a malicious local attacker to use this for privilege escalation (bnc#1105322). - CVE-2018-9363: Prevent buffer overflow in hidp_process_report (bsc#1105292). The following non-security bugs were fixed: - 9p/net: Fix zero-copy path in the 9p virtio transport (bnc#1012382). - 9p/virtio: fix off-by-one error in sg list bounds check (bnc#1012382). - 9p: fix multiple NULL-pointer-dereferences (bnc#1012382). - ACPI / LPSS: Add missing prv_offset setting for byt/cht PWM devices (bnc#1012382). - ACPI / PCI: Bail early in acpi_pci_add_bus() if there is no ACPI handle (bnc#1012382). - ACPI / PM: save NVS memory for ASUS 1025C laptop (bnc#1012382). - ACPI: save NVS memory for Lenovo G50-45 (bnc#1012382). - ALSA: cs5535audio: Fix invalid endian conversion (bnc#1012382). - ALSA: emu10k1: Rate-limit error messages about page errors (bnc#1012382). - ALSA: emu10k1: add error handling for snd_ctl_add (bnc#1012382). - ALSA: fm801: add error handling for snd_ctl_add (bnc#1012382). - ALSA: hda - Sleep for 10ms after entering D3 on Conexant codecs (bnc#1012382). - ALSA: hda - Turn CX8200 into D3 as well upon reboot (bnc#1012382). - ALSA: hda/ca0132: fix build failure when a local macro is defined (bnc#1012382). - ALSA: hda: Correct Asrock B85M-ITX power_save blacklist entry (bnc#1012382). - ALSA: memalloc: Do not exceed over the requested size (bnc#1012382). - ALSA: rawmidi: Change resized buffers atomically (bnc#1012382). - ALSA: snd-aoa: add of_node_put() in error path (bsc#1099810). - ALSA: usb-audio: Apply rate limit to warning messages in URB complete callback (bnc#1012382). - ALSA: virmidi: Fix too long output trigger loop (bnc#1012382). - ALSA: vx222: Fix invalid endian conversions (bnc#1012382). - ALSA: vxpocket: Fix invalid endian conversions (bnc#1012382). - ARC: Enable machine_desc->init_per_cpu for !CONFIG_SMP (bnc#1012382). - ARC: Explicitly add -mmedium-calls to CFLAGS (bnc#1012382). - ARC: Fix CONFIG_SWAP (bnc#1012382). - ARC: mm: allow mprotect to make stack mappings executable (bnc#1012382). - ARM: 8780/1: ftrace: Only set kernel memory back to read-only after boot (bnc#1012382). - ARM: dts: Cygnus: Fix I2C controller interrupt type (bnc#1012382). - ARM: dts: am3517.dtsi: Disable reference to OMAP3 OTG controller (bnc#1012382). - ARM: dts: am437x: make edt-ft5x06 a wakeup source (bnc#1012382). - ARM: dts: da850: Fix interrups property for gpio (bnc#1012382). - ARM: dts: imx6sx: fix irq for pcie bridge (bnc#1012382). - ARM: fix put_user() for gcc-8 (bnc#1012382). - ARM: imx_v4_v5_defconfig: Select ULPI support (bnc#1012382). - ARM: imx_v6_v7_defconfig: Select ULPI support (bnc#1012382). - ARM: pxa: irq: fix handling of ICMR registers in suspend/resume (bnc#1012382). - ARM: tegra: Fix Tegra30 Cardhu PCA954x reset (bnc#1012382). - ASoC: Intel: cht_bsw_max98090: remove useless code, align with ChromeOS driver (git-fixes). - ASoC: Intel: cht_bsw_max98090_ti: Fix jack initialization (bnc#1012382). - ASoC: dpcm: do not merge format from invalid codec dai (bnc#1012382). - ASoC: dpcm: fix BE dai not hw_free and shutdown (bnc#1012382). - ASoC: pxa: Fix module autoload for platform drivers (bnc#1012382). - ASoC: sirf: Fix potential NULL pointer dereference (bnc#1012382). - Add reference to bsc#1091171 (bnc#1012382; bsc#1091171). - Bluetooth: avoid killing an already killed socket (bnc#1012382). - Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011 (bnc#1012382). - Bluetooth: btusb: Remove Yoga 920 from the btusb_needs_reset_resume_table (bsc#1087092). - Bluetooth: btusb: Use DMI matching for QCA reset_resume quirking (bsc#1087092). - Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning (bnc#1012382). - Documentation/spec_ctrl: Do some minor cleanups (bnc#1012382). - HID: hid-plantronics: Re-resend Update to map button for PTT products (bnc#1012382). - HID: i2c-hid: check if device is there before really probing (bnc#1012382). - HID: wacom: Correct touch maximum XY of 2nd-gen Intuos (bnc#1012382). - IB/core: Make testing MR flags for writability a static inline function (bnc#1012382). - IB/core: Remove duplicate declaration of gid_cache_wq (bsc#1056596). - IB/iser: Do not reduce max_sectors (bsc#1063646). - IB/mlx4: Fix an error handling path in 'mlx4_ib_rereg_user_mr()' (git-fixes). - IB/mlx4: Mark user MR as writable if actual virtual memory is writable (bnc#1012382). - IB/mlx5: Fetch soft WQE's on fatal error state (bsc#1015342 bsc#1015343). - IB/mlx5: Use 'kvfree()' for memory allocated by 'kvzalloc()' (bsc#1015342 bsc#1015343). - IB/ocrdma: fix out of bounds access to local buffer (bnc#1012382). - Input: elan_i2c - add ACPI ID for lenovo ideapad 330 (bnc#1012382). - Input: elan_i2c - add another ACPI ID for Lenovo Ideapad 330-15AST (bnc#1012382). - Input: i8042 - add Lenovo LaVie Z to the i8042 reset list (bnc#1012382). - KVM/Eventfd: Avoid crash when assign and deassign specific eventfd in parallel (bnc#1012382). - KVM: MMU: always terminate page walks at level 1 (bsc#1062604). - KVM: MMU: simplify last_pte_bitmap (bsc#1062604). - KVM: VMX: Work around kABI breakage in 'enum vmx_l1d_flush_state' (bsc#1106369). - KVM: VMX: fixes for vmentry_l1d_flush module parameter (bsc#1106369). - KVM: arm/arm64: Skip updating PMD entry if no change (bnc#1012382). - KVM: arm/arm64: Skip updating PTE entry if no change (bnc#1012382). - KVM: irqfd: fix race between EPOLLHUP and irq_bypass_register_consumer (bnc#1012382). - KVM: nVMX: update last_nonleaf_level when initializing nested EPT (bsc#1062604). - MIPS: Correct the 64-bit DSP accumulator register size (bnc#1012382). - MIPS: Fix off-by-one in pci_resource_to_user() (bnc#1012382). - MIPS: ath79: fix register address in ath79_ddr_wb_flush() (bnc#1012382). - MIPS: lib: Provide MIPS64r6 __multi3() for GCC lower than 7 (bnc#1012382). - NET: stmmac: align DMA stuff to largest cache line length (bnc#1012382). - PCI: Prevent sysfs disable of device while driver is attached (bnc#1012382). - PCI: Skip MPS logic for Virtual Functions (VFs) (bnc#1012382). - PCI: hotplug: Do not leak pci_slot on registration failure (bnc#1012382). - PCI: pciehp: Fix use-after-free on unplug (bnc#1012382). - PCI: pciehp: Request control of native hotplug only if supported (bnc#1012382). - PM / sleep: wakeup: Fix build error caused by missing SRCU support (bnc#1012382). - RDMA/i40iw: Avoid panic when objects are being created and destroyed (bsc#969476 bsc#969477). - RDMA/i40iw: Avoid panic when reading back the IRQ affinity hint (bsc#969476 bsc#969477). - RDMA/i40iw: Avoid reference leaks when processing the AEQ (bsc#969476 bsc#969477). - RDMA/i40w: Hold read semaphore while looking after VMA (bsc#1024376). - RDMA/mad: Convert BUG_ONs to error flows (bnc#1012382). - RDMA/mlx5: Use proper spec flow label type (bsc#1015342 bsc#1015343). - Revert "MIPS: BCM47XX: Enable 74K Core ExternalSync for PCIe erratum" (bnc#1012382). - Revert "UBIFS: Fix potential integer overflow in allocation" (bnc#1012382). - Revert "f2fs: handle dirty segments inside refresh_sit_entry" (bsc#1106281). - Revert "mm: page_alloc: skip over regions of invalid pfns where possible" (bnc#1107078). - Smack: Mark inode instant in smack_task_to_inode (bnc#1012382). - USB: musb: fix external abort on suspend (bsc#1085536). - USB: option: add support for DW5821e (bnc#1012382). - USB: serial: metro-usb: stop I/O after failed open (bsc#1085539). - USB: serial: sierra: fix potential deadlock at close (bnc#1012382). - Workaround kABI breakage by __must_check drop of strscpy() (bsc#1107319). - afs: Fix directory permissions check (bsc#1106283). - arc: fix build errors in arc/include/asm/delay.h (bnc#1012382). - arc: fix type warnings in arc/mm/cache.c (bnc#1012382). - arm64: make secondary_start_kernel() notrace (bnc#1012382). - arm64: mm: check for upper PAGE_SHIFT bits in pfn_valid() (bnc#1012382). - ath: Add regulatory mapping for APL13_WORLD (bnc#1012382). - ath: Add regulatory mapping for APL2_FCCA (bnc#1012382). - ath: Add regulatory mapping for Bahamas (bnc#1012382). - ath: Add regulatory mapping for Bermuda (bnc#1012382). - ath: Add regulatory mapping for ETSI8_WORLD (bnc#1012382). - ath: Add regulatory mapping for FCC3_ETSIC (bnc#1012382). - ath: Add regulatory mapping for Serbia (bnc#1012382). - ath: Add regulatory mapping for Tanzania (bnc#1012382). - ath: Add regulatory mapping for Uganda (bnc#1012382). - atl1c: reserve min skb headroom (bnc#1012382). - atm: Preserve value of skb->truesize when accounting to vcc (bsc#1089066). - audit: allow not equal op for audit by executable (bnc#1012382). - backlight: as3711_bl: Fix Device Tree node leaks (bsc#1106929). - backlight: lm3630a: Bump REG_MAX value to 0x50 instead of 0x1F (bsc#1106929). - bcache: avoid unncessary cache prefetch bch_btree_node_get() (bsc#1064232). - bcache: calculate the number of incremental GC nodes according to the total of btree nodes (bsc#1064232). - bcache: display rate debug parameters to 0 when writeback is not running (bsc#1064232). - bcache: do not check return value of debugfs_create_dir() (bsc#1064232). - bcache: finish incremental GC (bsc#1064232). - bcache: fix I/O significant decline while backend devices registering (bsc#1064232). - bcache: fix error setting writeback_rate through sysfs interface (bsc#1064232). - bcache: free heap cache_set->flush_btree in bch_journal_free (bsc#1064232). - bcache: make the pr_err statement used for ENOENT only in sysfs_attatch section (bsc#1064232). - bcache: release dc->writeback_lock properly in bch_writeback_thread() (bsc#1064232). - bcache: set max writeback rate when I/O request is idle (bsc#1064232). - bcache: simplify the calculation of the total amount of flash dirty data (bsc#1064232). - be2net: remove unused old custom busy-poll fields (bsc#1021121 ). - blkdev: __blkdev_direct_IO_simple: fix leak in error case (bsc#1083663). - block: bio_iov_iter_get_pages: fix size of last iovec (bsc#1083663). - block: bio_iov_iter_get_pages: pin more pages for multi-segment IOs (bsc#1083663). - block: do not use interruptible wait anywhere (bnc#1012382). - bnx2x: Fix invalid memory access in rss hash config path (bnc#1012382). - bnx2x: Fix receiving tx-timeout in error or recovery state (bnc#1012382). - bnxt_en: Always set output parameters in bnxt_get_max_rings() (bsc#963575). - bnxt_en: Fix for system hang if request_irq fails (bnc#1012382). - bnxt_en: Fix inconsistent BNXT_FLAG_AGG_RINGS logic (bsc#1020412 ). - bpf: fix references to free_bpf_prog_info() in comments (bnc#1012382). - brcmfmac: Add support for bcm43364 wireless chipset (bnc#1012382). - brcmfmac: stop watchdog before detach and free everything (bnc#1012382). - bridge: Propagate vlan add failure to user (bnc#1012382). - btrfs: add barriers to btrfs_sync_log before log_commit_wait wakeups (bnc#1012382). - btrfs: do not leak ret from do_chunk_alloc (bnc#1012382). - btrfs: qgroup: Finish rescan when hit the last leaf of extent tree (bnc#1012382). - btrfs: quota: Set rescan progress to (u64)-1 if we hit last leaf (git-fixes). - btrfs: round down size diff when shrinking/growing device (bsc#1097105). - can: ems_usb: Fix memory leak on ems_usb_disconnect() (bnc#1012382). - can: mpc5xxx_can: check of_iomap return before use (bnc#1012382). - can: xilinx_can: fix RX loop if RXNEMP is asserted without RXOK (bnc#1012382). - can: xilinx_can: fix RX overflow interrupt not being enabled (bnc#1012382). - can: xilinx_can: fix device dropping off bus on RX overrun (bnc#1012382). - can: xilinx_can: fix incorrect clear of non-processed interrupts (bnc#1012382). - can: xilinx_can: fix recovery from error states not being propagated (bnc#1012382). - can: xilinx_can: keep only 1-2 frames in TX FIFO to fix TX accounting (bnc#1012382). - cdrom: Fix info leak/OOB read in cdrom_ioctl_drive_status (bnc#1012382). - ceph: fix incorrect use of strncpy (bsc#1107319). - ceph: return errors from posix_acl_equiv_mode() correctly (bsc#1107320). - cifs: Fix stack out-of-bounds in smb{2,3}_create_lease_buf() (bsc#1012382). - cifs: add missing debug entries for kconfig options (bnc#1012382). - cifs: check kmalloc before use (bsc#1012382). - cifs: store the leaseKey in the fid on SMB2_open (bsc#1012382). - clk: tegra: Fix PLL_U post divider and initial rate on Tegra30 (bnc#1012382). - crypto: ablkcipher - fix crash flushing dcache in error path (bnc#1012382). - crypto: authenc - do not leak pointers to authenc keys (bnc#1012382). - crypto: authencesn - do not leak pointers to authenc keys (bnc#1012382). - crypto: blkcipher - fix crash flushing dcache in error path (bnc#1012382). - crypto: padlock-aes - Fix Nano workaround data corruption (bnc#1012382). - crypto: vmac - require a block cipher with 128-bit block size (bnc#1012382). - crypto: vmac - separate tfm and request context (bnc#1012382). - crypto: vmx - Fix sleep-in-atomic bugs (bsc#1048317). - cxgb4: when disabling dcb set txq dcb priority to 0 (bnc#1012382). - cxl: Fix wrong comparison in cxl_adapter_context_get() (bsc#1055014. - dccp: fix undefined behavior with 'cwnd' shift in ccid2_cwnd_restart() (bnc#1012382). - disable loading f2fs module on PAGE_SIZE > 4KB (bnc#1012382). - dm cache metadata: save in-core policy_hint_size to on-disk superblock (bnc#1012382). - dma-iommu: Fix compilation when !CONFIG_IOMMU_DMA (bnc#1012382). - dmaengine: k3dma: Off by one in k3_of_dma_simple_xlate() (bnc#1012382). - dmaengine: pxa_dma: remove duplicate const qualifier (bnc#1012382). - driver core: Partially revert "driver core: correct device's shutdown order" (bnc#1012382). - drivers: net: lmc: fix case value for target abort error (bnc#1012382). - drm/armada: fix colorkey mode property (bnc#1012382). - drm/atmel-hlcdc: check stride values in the first plane (bsc#1106929). - drm/atomic: Handling the case when setting old crtc for plane (bnc#1012382). - drm/bridge: adv7511: Reset registers on hotplug (bnc#1012382). - drm/cirrus: Use drm_framebuffer_put to avoid kernel oops in clean-up (bsc#1101822). - drm/drivers: add support for using the arch wc mapping API (git-fixes). - drm/exynos/dsi: mask frame-done interrupt (bsc#1106929). - drm/exynos: decon5433: Fix WINCONx reset value (bnc#1012382). - drm/exynos: decon5433: Fix per-plane global alpha for XRGB modes (bnc#1012382). - drm/exynos: gsc: Fix support for NV16/61, YUV420/YVU420 and YUV422 modes (bnc#1012382). - drm/gma500: fix psb_intel_lvds_mode_valid()'s return type (bnc#1012382). - drm/i915/userptr: reject zero user_size (bsc#1090888). - drm/i915: Correctly handle limited range YCbCr data on VLV/CHV (bsc#1087092). - drm/imx: fix typo in ipu_plane_formats (bsc#1106929). - drm/imx: imx-ldb: check if channel is enabled before printing warning (bnc#1012382). - drm/imx: imx-ldb: disable LDB on driver bind (bnc#1012382). - drm/msm/hdmi: Use bitwise operators when building register values (bsc#1106929). - drm/nouveau/gem: off by one bugs in nouveau_gem_pushbuf_reloc_apply() (bnc#1012382). - drm/panel: type promotion bug in s6e8aa0_read_mtp_id() (bsc#1105769). - drm/radeon: fix mode_valid's return type (bnc#1012382). - drm: Add DP PSR2 sink enable bit (bnc#1012382). - drm: Reject getfb for multi-plane framebuffers (bsc#1106929). - enic: do not call enic_change_mtu in enic_probe (git-fixes). - enic: handle mtu change for vf properly (bnc#1012382). - enic: initialize enic->rfs_h.lock in enic_probe (bnc#1012382). - ext4: check for NUL characters in extended attribute's name (bnc#1012382). - ext4: fix spectre gadget in ext4_mb_regular_allocator() (bnc#1012382). - ext4: reset error code in ext4_find_entry in fallback (bnc#1012382). - ext4: sysfs: print ext4_super_block fields as little-endian (bsc#1106229). - f2fs: fix to do not trigger writeback during recovery (bnc#1012382). - fat: fix memory allocation failure handling of match_strdup() (bnc#1012382). - fb: fix lost console when the user unplugs a USB adapter (bnc#1012382). - fbdev: omapfb: off by one in omapfb_register_client() (bsc#1106929). - fix __legitimize_mnt()/mntput() race (bnc#1012382). - fix mntput/mntput race (bnc#1012382). - fork: unconditionally clear stack on fork (bnc#1012382). - fs/9p/xattr.c: catch the error of p9_client_clunk when setting xattr failed (bnc#1012382). - fs/dax.c: fix inefficiency in dax_writeback_mapping_range() (bsc#1106185). - fs/quota: Fix spectre gadget in do_quotactl (bnc#1012382). - fs: aio: fix the increment of aio-nr and counting against aio-max-nr (bsc#1068075, bsc#1078921). - fuse: Add missed unlock_page() to fuse_readpages_fill() (bnc#1012382). - fuse: Do not access pipe->buffers without pipe_lock() (bnc#1012382). - fuse: Fix oops at process_init_reply() (bnc#1012382). - fuse: fix double request_end() (bnc#1012382). - fuse: fix unlocked access to processing queue (bnc#1012382). - fuse: umount should wait for all requests (bnc#1012382). - genirq/proc: Return proper error code when irq_set_affinity() fails (bnc#1105392). - getxattr: use correct xattr length (bnc#1012382). - hfsplus: Do not clear SGID when inheriting ACLs (bsc#1030552). - hvc_opal: do not set tb_ticks_per_usec in udbg_init_opal_common() (bnc#1012382). - hwrng: exynos - Disable runtime PM on driver unbind (git-fixes). - i2c: davinci: Avoid zero value of CLKH (bnc#1012382). - i2c: imx: Fix race condition in dma read (bnc#1012382). - i2c: imx: Fix reinit_completion() use (bnc#1012382). - i2c: ismt: fix wrong device address when unmap the data buffer (bnc#1012382). - i40e: use cpumask_copy instead of direct assignment (bsc#1053685). - i40iw: Fix memory leak in error path of create QP (bsc#969476 bsc#969477). - i40iw: Use correct address in dst_neigh_lookup for IPv6 (bsc#969476 bsc#969477). - ibmvnic: Include missing return code checks in reset function (bnc#1107966). - ieee802154: at86rf230: switch from BUG_ON() to WARN_ON() on problem (bnc#1012382). - ieee802154: at86rf230: use __func__ macro for debug messages (bnc#1012382). - ieee802154: fakelb: switch from BUG_ON() to WARN_ON() on problem (bnc#1012382). - igb: Fix not adding filter elements to the list (bsc#1024361 bsc#1024365). - iio: ad9523: Fix displayed phase (bnc#1012382). - iio: ad9523: Fix return value for ad952x_store() (bnc#1012382). - inet: frag: enforce memory limits earlier (bnc#1012382 bsc#970506). - iommu/amd: make sure TLB to be flushed before IOVA freed (bsc#1106105). - iommu/vt-d: Add definitions for PFSID (bnc#1012382). - iommu/vt-d: Fix dev iotlb pfsid use (bnc#1012382). - iommu/vt-d: Ratelimit each dmar fault printing (bsc#1106105). - ioremap: Update pgtable free interfaces with addr (bnc#1012382). - ip: hash fragments consistently (bnc#1012382). - ip: in cmsg IP(V6)_ORIGDSTADDR call pskb_may_pull (bnc#1012382). - ipconfig: Correctly initialise ic_nameservers (bnc#1012382). - ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV (bnc#1012382). - ipv4: Return EINVAL when ping_group_range sysctl does not map to user ns (bnc#1012382). - ipv4: remove BUG_ON() from fib_compute_spec_dst (bnc#1012382). - ipv6: fix useless rol32 call on hash (bnc#1012382). - ipv6: mcast: fix unsolicited report interval after receiving querys (bnc#1012382). - ipvlan: use ETH_MAX_MTU as max mtu (bsc#1033962). - iscsi target: fix session creation failure handling (bnc#1012382). - isdn: Disable IIOCDBGVAR (bnc#1012382). - iw_cxgb4: remove duplicate memcpy() in c4iw_create_listen() (bsc#969476 bsc#969477). - iwlwifi: pcie: fix race in Rx buffer allocator (bnc#1012382). - ixgbe: Be more careful when modifying MAC filters (bnc#1012382). - jfs: Do not clear SGID when inheriting ACLs (bsc#1030552). - jump_label: Add RELEASE barrier after text changes (bsc#1105271). - jump_label: Fix concurrent static_key_enable/disable() (bsc#1105271). - jump_label: Move CPU hotplug locking (bsc#1105271). - jump_label: Provide hotplug context variants (bsc#1105271). - jump_label: Reduce the size of struct static_key (bsc#1105271). - jump_label: Reorder hotplug lock and jump_label_lock (bsc#1105271). - jump_label: Split out code under the hotplug lock (bsc#1105271). - jump_label: remove bug.h, atomic.h dependencies for HAVE_JUMP_LABEL (bsc#1105271). - kabi/severities: Ignore missing cpu_tss_tramp (bsc#1099597) - kabi: x86/speculation/l1tf: Increase l1tf memory limit for Nehalem+ (bnc#1105536). - kasan: do not emit builtin calls when sanitization is off (bnc#1012382). - kasan: fix shadow_size calculation error in kasan_module_alloc (bnc#1012382). - kbuild: verify that $DEPMOD is installed (bnc#1012382). - kernel: improve spectre mitigation (bnc#1106934, LTC#171029). - kprobes/x86: Fix %p uses in error messages (bnc#1012382). - kprobes: Make list and blacklist root user read only (bnc#1012382). - kthread, tracing: Do not expose half-written comm when creating kthreads (bsc#1104897). - kvm: x86: vmx: fix vpid leak (bnc#1012382). - l2tp: use sk_dst_check() to avoid race on sk->sk_dst_cache (bnc#1012382). - lib/rhashtable: consider param->min_size when setting initial table size (bnc#1012382). - libata: Fix command retry decision (bnc#1012382). - libceph: check authorizer reply/challenge length before reading (bsc#1096748). - libceph: factor out __ceph_x_decrypt() (bsc#1096748). - libceph: factor out __prepare_write_connect() (bsc#1096748). - libceph: factor out encrypt_authorizer() (bsc#1096748). - libceph: store ceph_auth_handshake pointer in ceph_connection (bsc#1096748). - libceph: weaken sizeof check in ceph_x_verify_authorizer_reply() (bsc#1096748). - llc: use refcount_inc_not_zero() for llc_sap_find() (bnc#1012382). - locking/lockdep: Do not record IRQ state within lockdep code (bnc#1012382). - locks: pass inode pointer to locks_free_lock_context (bsc@1099832). - locks: prink more detail when there are leaked locks (bsc#1099832). - locks: restore a warn for leaked locks on close (bsc#1099832). - m68k: fix "bad page state" oops on ColdFire boot (bnc#1012382). - mac80211: add stations tied to AP_VLANs during hw reconfig (bnc#1012382). - md/raid10: fix that replacement cannot complete recovery after reassemble (bnc#1012382). - md: fix NULL dereference of mddev->pers in remove_and_add_spares() (bnc#1012382). - media: omap3isp: fix unbalanced dma_iommu_mapping (bnc#1012382). - media: rcar_jpu: Add missing clk_disable_unprepare() on error in jpu_open() (bnc#1012382). - media: rtl28xxu: be sure that it won't go past the array size (bsc#1050431). - media: s5p-jpeg: fix number of components macro (bsc#1050431). - media: saa7164: Fix driver name in debug output (bnc#1012382). - media: si470x: fix __be16 annotations (bnc#1012382). - media: siano: get rid of __le32/__le16 cast warnings (bnc#1012382). - media: staging: omap4iss: Include asm/cacheflush.h after generic includes (bnc#1012382). - media: videobuf2-core: do not call memop 'finish' when queueing (bnc#1012382). - memory: tegra: Apply interrupts mask per SoC (bnc#1012382). - memory: tegra: Do not handle spurious interrupts (bnc#1012382). - mfd: cros_ec: Fail early if we cannot identify the EC (bnc#1012382). - microblaze: Fix simpleImage format generation (bnc#1012382). - mm/hugetlb: filter out hugetlb pages if HUGEPAGE migration is not supported (bnc#1106697). - mm/memory.c: check return value of ioremap_prot (bnc#1012382). - mm/slub.c: add __printf verification to slab_err() (bnc#1012382). - mm/tlb: Remove tlb_remove_table() non-concurrent condition (bnc#1012382). - mm: Add vm_insert_pfn_prot() (bnc#1012382). - mm: fix cache mode tracking in vm_insert_mixed() (bnc#1012382). - mm: memcg: fix use after free in mem_cgroup_iter() (bnc#1012382). - mm: vmalloc: avoid racy handling of debugobjects in vunmap (bnc#1012382). - mm: x86: move _PAGE_SWP_SOFT_DIRTY from bit 7 to bit 1 (bnc#1012382). - mtd: rawnand: fsl_ifc: fix FSL NAND driver to read all ONFI parameter pages (bnc#1012382). - mtd: ubi: wl: Fix error return code in ubi_wl_init() (git-fixes). - mwifiex: correct histogram data with appropriate index (bnc#1012382). - mwifiex: handle race during mwifiex_usb_disconnect (bnc#1012382). - net/9p/client.c: version pointer uninitialized (bnc#1012382). - net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree() (bnc#1012382). - net/ethernet/freescale/fman: fix cross-build error (bnc#1012382). - net/ipv4: Set oif in fib_compute_spec_dst (bnc#1012382). - net/mlx4_core: Save the qpn from the input modifier in RST2INIT wrapper (bnc#1012382). - net/mlx5: Add missing SET_DRIVER_VERSION command translation (bsc#1015342 bsc#1015343). - net/mlx5: E-Switch, Include VF RDMA stats in vport statistics (bsc#966170 bsc#966172). - net/mlx5: Eswitch, Use 'kvfree()' for memory allocated by 'kvzalloc()' (bsc#1015342 bsc#1015343). - net/mlx5: Fix wrong size allocation for QoS ETC TC regitster (bsc#966170 bsc#966172). - net/mlx5: Vport, Use 'kvfree()' for memory allocated by 'kvzalloc()' (bsc#966170 bsc#966172). - net/mlx5e: Do not allow aRFS for encapsulated packets (bsc#1015342 bsc#1015343). - net/mlx5e: Err if asked to offload TC match on frag being first (bsc#1015342 bsc#1015343). - net/mlx5e: Fix quota counting in aRFS expire flow (bsc#1015342 bsc#1015343). - net/mlx5e: Refine ets validation function (bsc#966170 bsc#966172). - net: 6lowpan: fix reserved space for single frames (bnc#1012382). - net: Do not copy pfmemalloc flag in __copy_skb_header() (bnc#1012382). - net: add skb_condense() helper (bsc#1089066). - net: adjust skb->truesize in ___pskb_trim() (bsc#1089066). - net: adjust skb->truesize in pskb_expand_head() (bsc#1089066). - net: axienet: Fix double deregister of mdio (bnc#1012382). - net: caif: Add a missing rcu_read_unlock() in caif_flow_cb (bnc#1012382). - net: davinci_emac: match the mdio device against its compatible if possible (bnc#1012382). - net: dsa: Do not suspend/resume closed slave_dev (bnc#1012382). - net: ena: Fix use of uninitialized DMA address bits field (bsc#1027968). - net: fix amd-xgbe flow-control issue (bnc#1012382). - net: hamradio: use eth_broadcast_addr (bnc#1012382). - net: lan78xx: Fix misplaced tasklet_schedule() call (bnc#1012382). - net: lan78xx: fix rx handling before first packet is send (bnc#1012382). - net: mac802154: tx: expand tailroom if necessary (bnc#1012382). - net: phy: fix flag masking in __set_phy_supported (bnc#1012382). - net: prevent ISA drivers from building on PPC32 (bnc#1012382). - net: propagate dev_get_valid_name return code (bnc#1012382). - net: qca_spi: Avoid packet drop during initial sync (bnc#1012382). - net: qca_spi: Fix log level if probe fails (bnc#1012382). - net: qca_spi: Make sure the QCA7000 reset is triggered (bnc#1012382). - net: socket: fix potential spectre v1 gadget in socketcall (bnc#1012382). - net: usb: rtl8150: demote allmulti message to dev_dbg() (bnc#1012382). - net: vmxnet3: use new api ethtool_{get|set}_link_ksettings (bsc#1091860 bsc#1098253). - net_sched: Fix missing res info when create new tc_index filter (bnc#1012382). - net_sched: fix NULL pointer dereference when delete tcindex filter (bnc#1012382). - netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state (bnc#1012382). - netfilter: ipset: List timing out entries with "timeout 1" instead of zero (bnc#1012382). - netfilter: ipv6: nf_defrag: reduce struct net memory waste (bnc#1012382). - netfilter: ipvs: do not create conn for ABORT packet in sctp_conn_schedule (bsc#1102797). - netfilter: ipvs: fix the issue that sctp_conn_schedule drops non-INIT packet (bsc#1102797). - netfilter: x_tables: set module owner for icmp(6) matches (bnc#1012382). - netlink: Do not shift on 64 for ngroups (bnc#1012382). - netlink: Do not shift with UB on nlk->ngroups (bnc#1012382). - netlink: Do not subscribe to non-existent groups (bnc#1012382). - netlink: Fix spectre v1 gadget in netlink_create() (bnc#1012382). - netlink: do not enter direct reclaim from netlink_trim() (bsc#1042286). - nfsd: fix potential use-after-free in nfsd4_decode_getdeviceinfo (bnc#1012382). - nl80211: Add a missing break in parse_station_flags (bnc#1012382). - nohz: Fix local_timer_softirq_pending() (bnc#1012382). - nvme-fc: release io queues to allow fast fail (bsc#1102486). - nvme: if_ready checks to fail io to deleting controller (bsc#1102486). - nvme: kABI-compliant version of nvmf_fail_nonready_command() (bsc#1102486). - nvmet-fc: fix target sgl list on large transfers (bsc#1102486). - osf_getdomainname(): use copy_to_user() (bnc#1012382). - ovl: Do d_type check only if work dir creation was successful (bnc#1012382). - ovl: Ensure upper filesystem supports d_type (bnc#1012382). - ovl: warn instead of error if d_type is not supported (bnc#1012382). - packet: refine ring v3 block size test to hold one frame (bnc#1012382). - packet: reset network header if packet shorter than ll reserved space (bnc#1012382). - parisc: Define mb() and add memory barriers to assembler unlock sequences (bnc#1012382). - parisc: Enable CONFIG_MLONGCALLS by default (bnc#1012382). - parisc: Remove ordered stores from syscall.S (bnc#1012382). - parisc: Remove unnecessary barriers from spinlock.h (bnc#1012382). - perf auxtrace: Fix queue resize (bnc#1012382). - perf llvm-utils: Remove bashism from kernel include fetch script (bnc#1012382). - perf report powerpc: Fix crash if callchain is empty (bnc#1012382). - perf test session topology: Fix test on s390 (bnc#1012382). - perf/x86/intel/uncore: Correct fixed counter index check for NHM (bnc#1012382). - perf/x86/intel/uncore: Correct fixed counter index check in generic code (bnc#1012382). - perf: fix invalid bit in diagnostic entry (bnc#1012382). - pinctrl: at91-pio4: add missing of_node_put (bnc#1012382). - pinctrl: freescale: off by one in imx1_pinconf_group_dbg_show() (bnc#1012382). - pnfs/blocklayout: off by one in bl_map_stripe() (bnc#1012382). - powerpc/32: Add a missing include header (bnc#1012382). - powerpc/64s: Default l1d_size to 64K in RFI fallback flush (bsc#1068032. - powerpc/64s: Fix compiler store ordering to SLB shadow area (bnc#1012382). - powerpc/8xx: fix invalid register expression in head_8xx.S (bnc#1012382). - powerpc/chrp/time: Make some functions static, add missing header include (bnc#1012382). - powerpc/embedded6xx/hlwd-pic: Prevent interrupts from being handled by Starlet (bnc#1012382). - powerpc/lib: Fix the feature fixup tests to actually work (bsc#1066223). - powerpc/powermac: Add missing prototype for note_bootable_part() (bnc#1012382). - powerpc/powermac: Mark variable x as unused (bnc#1012382). - powerpc/pseries: Fix endianness while restoring of r3 in MCE handler (bnc#1012382). - powerpc/topology: Get topology for shared processors at boot (bsc#1104683). - powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (bsc#1068032, bsc#1080157. - powerpc: Avoid code patching freed init sections (bnc#1107735). - powerpc: make feature-fixup tests fortify-safe (bsc#1066223). - provide special timeout module parameters for EC2 (bsc#1065364). - ptp: fix missing break in switch (bnc#1012382). - pwm: tiehrpwm: Fix disabling of output of PWMs (bnc#1012382). - qed: Add sanity check for SIMD fastpath handler (bnc#1012382). - qed: Correct Multicast API to reflect existence of 256 approximate buckets (bsc#1019695 bsc#1019699 bsc#1022604). - qed: Do not advertise DCBX_LLD_MANAGED capability (bsc#1019695 bsc#1019699 bsc#1022604). - qed: Fix possible memory leak in Rx error path handling (bsc#1019695 bsc#1019699 bsc#1022604 ). - qed: Fix possible race for the link state value (bnc#1012382). - qed: Fix setting of incorrect eswitch mode (bsc#1019695 bsc#1019699 bsc#1022604). - qed: Fix use of incorrect size in memcpy call (bsc#1019695 bsc#1019699 bsc#1022604). - qede: Adverstise software timestamp caps when PHC is not available (bsc#1019695 bsc#1019699 bsc#1022604). - qlge: Fix netdev features configuration (bsc#1098822). - qlogic: check kstrtoul() for errors (bnc#1012382). - random: mix rdrand with entropy sent in from userspace (bnc#1012382). - readahead: stricter check for bdi io_pages (VM Functionality). - regulator: pfuze100: add .is_enable() for pfuze100_swb_regulator_ops (bnc#1012382). - reiserfs: fix broken xattr handling (heap corruption, bad retval) (bnc#1012382). - ring_buffer: tracing: Inherit the tracing setting to next ring buffer (bnc#1012382). - root dentries need RCU-delayed freeing (bnc#1012382). - rsi: Fix 'invalid vdd' warning in mmc (bnc#1012382). - rtc: ensure rtc_set_alarm fails when alarms are not supported (bnc#1012382). - rtnetlink: add rtnl_link_state check in rtnl_configure_link (bnc#1012382). - s390/cpum_sf: Add data entry sizes to sampling trailer entry (bnc#1012382). - s390/kvm: fix deadlock when killed by oom (bnc#1012382). - s390/lib: use expoline for all bcr instructions (bnc#1106934, LTC#171029). - s390/pci: fix out of bounds access during irq setup (bnc#1012382). - s390/qdio: reset old sbal_state flags (bnc#1012382). - s390/qeth: do not clobber buffer on async TX completion (bnc#1104485, LTC#170349). - s390/qeth: fix race when setting MAC address (bnc#1104485, LTC#170726). - s390: add explicit linux/stringify.h for jump label (bsc#1105271). - s390: detect etoken facility (bnc#1106934, LTC#171029). - s390: fix br_r1_trampoline for machines without exrl (bnc#1012382 bnc#1106934 LTC#171029). - sched/fair: Avoid divide by zero when rebalancing domains (bsc#1096254). - scripts/tar-up.sh: Do not package gitlog-excludes file Also fix the evaluation of gitlog-excludes file, too - scsi: 3w-9xxx: fix a missing-check bug (bnc#1012382). - scsi: 3w-xxxx: fix a missing-check bug (bnc#1012382). - scsi: core: Avoid that SCSI device removal through sysfs triggers a deadlock (bnc#1012382). - scsi: fcoe: drop frames in ELS LOGO error path (bnc#1012382). - scsi: hpsa: limit transfer length to 1MB, not 512kB (bsc#1102346). - scsi: libiscsi: fix possible NULL pointer dereference in case of TMF (bnc#1012382). - scsi: megaraid: silence a static checker bug (bnc#1012382). - scsi: megaraid_sas: Increase timeout by 1 sec for non-RAID fastpath IOs (bnc#1012382). - scsi: qla2xxx: Fix ISP recovery on unload (bnc#1012382). - scsi: qla2xxx: Return error when TMF returns (bnc#1012382). - scsi: scsi_dh: replace too broad "TP9" string with the exact models (bnc#1012382). - scsi: sr: Avoid that opening a CD-ROM hangs with runtime power management enabled (bnc#1012382). - scsi: sysfs: Introduce sysfs_{un,}break_active_protection() (bnc#1012382). - scsi: ufs: fix exception event handling (bnc#1012382). - scsi: vmw_pvscsi: Return DID_RESET for status SAM_STAT_COMMAND_TERMINATED (bnc#1012382). - scsi: xen-scsifront: add error handling for xenbus_printf (bnc#1012382). - scsi_debug: call resp_XXX function after setting host_scribble (bsc#1069138). - scsi_debug: reset injection flags for every_nth > 0 (bsc#1069138). - selftest/seccomp: Fix the flag name SECCOMP_FILTER_FLAG_TSYNC (bnc#1012382). - selftest/seccomp: Fix the seccomp(2) signature (bnc#1012382). - selftests/ftrace: Add snapshot and tracing_on test case (bnc#1012382). - selftests/x86/sigreturn/64: Fix spurious failures on AMD CPUs (bnc#1012382). - selftests: pstore: return Kselftest Skip code for skipped tests (bnc#1012382). - selftests: static_keys: return Kselftest Skip code for skipped tests (bnc#1012382). - selftests: sync: add config fragment for testing sync framework (bnc#1012382). - selftests: user: return Kselftest Skip code for skipped tests (bnc#1012382). - selftests: zram: return Kselftest Skip code for skipped tests (bnc#1012382). - serial: 8250_dw: always set baud rate in dw8250_set_termios (bnc#1012382). - sfc: stop the TX queue before pushing new buffers (bsc#1017967 ). - skbuff: Unconditionally copy pfmemalloc in __skb_clone() (bnc#1012382). - slab: __GFP_ZERO is incompatible with a constructor (bnc#1107060). - smb3: Do not send SMB3 SET_INFO if nothing changed (bnc#1012382). - smb3: do not request leases in symlink creation and query (bnc#1012382). - spi: davinci: fix a NULL pointer dereference (bnc#1012382). - squashfs: be more careful about metadata corruption (bnc#1012382). - squashfs: more metadata hardening (bnc#1012382). - squashfs: more metadata hardenings (bnc#1012382). - staging: android: ion: check for kref overflow (bnc#1012382). - string: drop __must_check from strscpy() and restore strscpy() usages in cgroup (bsc#1107319). - sys: do not hold uts_sem while accessing userspace memory (bnc#1106995). - target_core_rbd: use RCU in free_device (bsc#1105524). - tcp: Fix missing range_truesize enlargement in the backport (bnc#1012382). - tcp: add max_quickacks param to tcp_incr_quickack and tcp_enter_quickack_mode (bnc#1012382). - tcp: add one more quick ack after after ECN events (bnc#1012382). - tcp: do not aggressively quick ack after ECN events (bnc#1012382). - tcp: do not cancel delay-AcK on DCTCP special ACK (bnc#1012382). - tcp: do not delay ACK in DCTCP upon CE status change (bnc#1012382). - tcp: do not force quickack when receiving out-of-order packets (bnc#1012382). - tcp: fix dctcp delayed ACK schedule (bnc#1012382). - tcp: helpers to send special DCTCP ack (bnc#1012382). - tcp: identify cryptic messages as TCP seq # bugs (bnc#1012382). - tcp: refactor tcp_ecn_check_ce to remove sk type cast (bnc#1012382). - tcp: remove DELAYED ACK events in DCTCP (bnc#1012382). - tg3: Add higher cpu clock for 5762 (bnc#1012382). - thermal: exynos: fix setting rising_threshold for Exynos5433 (bnc#1012382). - timekeeping: Eliminate the stale declaration of ktime_get_raw_and_real_ts64() (bsc#969470). - tools/power turbostat: Read extended processor family from CPUID (bnc#1012382). - tools/power turbostat: fix -S on UP systems (bnc#1012382). - tools: usb: ffs-test: Fix build on big endian systems (bnc#1012382). - tpm: fix race condition in tpm_common_write() (bnc#1012382). - tracing/blktrace: Fix to allow setting same value (bnc#1012382). - tracing/kprobes: Fix trace_probe flags on enable_trace_kprobe() failure (bnc#1012382). - tracing: Do not call start/stop() functions when tracing_on does not change (bnc#1012382). - tracing: Fix double free of event_trigger_data (bnc#1012382). - tracing: Fix possible double free in event_enable_trigger_func() (bnc#1012382). - tracing: Quiet gcc warning about maybe unused link variable (bnc#1012382). - tracing: Use __printf markup to silence compiler (bnc#1012382). - tty: Fix data race in tty_insert_flip_string_fixed_flag (bnc#1012382). - turn off -Wattribute-alias (bnc#1012382). - ubi: Be more paranoid while seaching for the most recent Fastmap (bnc#1012382). - ubi: Fix Fastmap's update_vol() (bnc#1012382). - ubi: Fix races around ubi_refill_pools() (bnc#1012382). - ubi: Introduce vol_ignored() (bnc#1012382). - ubi: Rework Fastmap attach base code (bnc#1012382). - ubi: fastmap: Erase outdated anchor PEBs during attach (bnc#1012382). - ubifs: Check data node size before truncate (bsc#1106276). - ubifs: Fix memory leak in lprobs self-check (bsc#1106278). - ubifs: Fix synced_i_size calculation for xattr inodes (bsc#1106275). - ubifs: xattr: Do not operate on deleted inodes (bsc#1106271). - udl-kms: change down_interruptible to down (bnc#1012382). - udl-kms: fix crash due to uninitialized memory (bnc#1012382). - udl-kms: handle allocation failure (bnc#1012382). - udlfb: set optimal write delay (bnc#1012382). - uprobes: Use synchronize_rcu() not synchronize_sched() (bnc#1012382). - usb/phy: fix PPC64 build errors in phy-fsl-usb.c (bnc#1012382). - usb: audio-v2: Correct the comment for struct uac_clock_selector_descriptor (bsc#1099810). - usb: cdc_acm: Add quirk for Castles VEGA3000 (bnc#1012382). - usb: dwc2: debugfs: Do not touch RX FIFO during register dump (bsc#1100132). - usb: dwc2: fix isoc split in transfer with no data (bnc#1012382). - usb: gadget: composite: fix delayed_status race condition when set_interface (bnc#1012382). - usb: gadget: dwc2: fix memory leak in gadget_init() (bnc#1012382). - usb: gadget: f_fs: Only return delayed status when len is 0 (bnc#1012382). - usb: gadget: f_uac2: fix endianness of 'struct cntrl_*_lay3' (bnc#1012382). - usb: gadget: r8a66597: Fix a possible sleep-in-atomic-context bugs in r8a66597_queue() (bnc#1012382). - usb: gadget: r8a66597: Fix two possible sleep-in-atomic-context bugs in init_controller() (bnc#1012382). - usb: hub: Do not wait for connect state at resume for powered-off ports (bnc#1012382). - usb: renesas_usbhs: gadget: fix spin_lock_init() for uep->lock (bsc#1085536). - usb: xhci: increase CRS timeout value (bnc#1012382). - usbip: usbip_detach: Fix memory, udev context and udev leak (bnc#1012382). - userns: move user access out of the mutex (bnc#1012382). - virtio_balloon: fix another race between migration and ballooning (bnc#1012382). - virtio_console: fix uninitialized variable use (git-fixes). - vmw_balloon: VMCI_DOORBELL_SET does not check status (bnc#1012382). - vmw_balloon: do not use 2MB without batching (bnc#1012382). - vmw_balloon: fix VMCI use when balloon built into kernel (bnc#1012382). - vmw_balloon: fix inflation of 64-bit GFNs (bnc#1012382). - vmxnet3: Replace msleep(1) with usleep_range() (bsc#1091860 bsc#1098253). - vmxnet3: add receive data ring support (bsc#1091860 bsc#1098253). - vmxnet3: add support for get_coalesce, set_coalesce ethtool operations (bsc#1091860 bsc#1098253). - vmxnet3: allow variable length transmit data ring buffer (bsc#1091860 bsc#1098253). - vmxnet3: avoid assumption about invalid dma_pa in vmxnet3_set_mc() (bsc#1091860 bsc#1098253). - vmxnet3: avoid format strint overflow warning (bsc#1091860 bsc#1098253). - vmxnet3: avoid xmit reset due to a race in vmxnet3 (bsc#1091860 bsc#1098253). - vmxnet3: fix incorrect dereference when rxvlan is disabled (bsc#1091860 bsc#1098253). - vmxnet3: fix non static symbol warning (bsc#1091860 bsc#1098253). - vmxnet3: fix tx data ring copy for variable size (bsc#1091860 bsc#1098253). - vmxnet3: increase default rx ring sizes (bsc#1091860 bsc#1098253). - vmxnet3: introduce command to register memory region (bsc#1091860 bsc#1098253). - vmxnet3: introduce generalized command interface to configure the device (bsc#1091860 bsc#1098253). - vmxnet3: prepare for version 3 changes (bsc#1091860 bsc#1098253). - vmxnet3: remove redundant initialization of pointer 'rq' (bsc#1091860 bsc#1098253). - vmxnet3: remove unused flag "rxcsum" from struct vmxnet3_adapter (bsc#1091860 bsc#1098253). - vmxnet3: set the DMA mask before the first DMA map operation (bsc#1091860 bsc#1098253). - vmxnet3: update to version 3 (bsc#1091860 bsc#1098253). - vmxnet3: use DMA memory barriers where required (bsc#1091860 bsc#1098253). - vmxnet3: use correct flag to indicate LRO feature (bsc#1091860 bsc#1098253). - vsock: split dwork to avoid reinitializations (bnc#1012382). - vti6: Fix dev->max_mtu setting (bsc#1033962). - vti6: fix PMTU caching and reporting on xmit (bnc#1012382). - wlcore: sdio: check for valid platform device data before suspend (bnc#1012382). - x86/MCE: Remove min interval polling limitation (bnc#1012382). - x86/amd: do not set X86_BUG_SYSRET_SS_ATTRS when running under Xen (bnc#1012382). - x86/asm/entry/32: Simplify pushes of zeroed pt_regs->REGs (bnc#1012382). - x86/bugs: Move the l1tf function and define pr_fmt properly (bnc#1012382). - x86/bugs: Respect nospec command line option (bsc#1068032). - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (bnc#1012382). - x86/cpu: Make alternative_msr_write work for 32-bit code (bnc#1012382). - x86/cpu: Re-apply forced caps every time CPU caps are re-read (bnc#1012382). - x86/cpufeature: preserve numbers (kabi). - x86/cpufeatures: Add CPUID_7_EDX CPUID leaf (bnc#1012382). - x86/cpufeatures: Clean up Spectre v2 related CPUID flags (bnc#1012382). - x86/entry/64/compat: Clear registers for compat syscalls, to reduce speculation attack surface (bnc#1012382). - x86/entry/64: Remove %ebx handling from error_entry/exit (bnc#1102715). - x86/init: fix build with CONFIG_SWAP=n (bnc#1012382). - x86/irqflags: Mark native_restore_fl extern inline (bnc#1012382). - x86/irqflags: Provide a declaration for native_save_fl (git-fixes). - x86/mm/kmmio: Make the tracer robust against L1TF (bnc#1012382). - x86/mm/pat: Fix L1TF stable backport for CPA (bnc#1012382). - x86/mm/pat: Fix L1TF stable backport for CPA, 2nd call (bnc#1012382). - x86/mm/pat: Make set_memory_np() L1TF safe (bnc#1012382). - x86/mm: Add TLB purge to free pmd/pte page interfaces (bnc#1012382). - x86/mm: Disable ioremap free page handling on x86-PAE (bnc#1012382). - x86/mm: Give each mm TLB flush generation a unique ID (bnc#1012382). - x86/paravirt: Fix spectre-v2 mitigations for paravirt guests (bnc#1012382). - x86/paravirt: Make native_save_fl() extern inline (bnc#1012382). - x86/process: Correct and optimize TIF_BLOCKSTEP switch (bnc#1012382). - x86/process: Optimize TIF checks in __switch_to_xtra() (bnc#1012382). - x86/process: Optimize TIF_NOTSC switch (bnc#1012382). - x86/process: Re-export start_thread() (bnc#1012382). - x86/spectre: Add missing family 6 check to microcode check (bnc#1012382). - x86/spectre_v2: Do not check microcode versions when running under hypervisors (bnc#1012382). - x86/speculation/l1tf: Exempt zeroed PTEs from inversion (bnc#1012382). - x86/speculation/l1tf: Extend 64bit swap file size limit (bnc#1012382). - x86/speculation/l1tf: Fix off-by-one error when warning that system has too much RAM (bnc#1105536). - x86/speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit (bnc#1012382). - x86/speculation/l1tf: Fix up CPU feature flags (bnc#1012382). - x86/speculation/l1tf: Fix up pte->pfn conversion for PAE (bnc#1012382). - x86/speculation/l1tf: Increase l1tf memory limit for Nehalem+ (bnc#1105536). - x86/speculation/l1tf: Invert all not present mappings (bnc#1012382). - x86/speculation/l1tf: Make pmd/pud_mknotpresent() invert (bnc#1012382). - x86/speculation/l1tf: Protect PAE swap entries against L1TF (bnc#1012382). - x86/speculation/l1tf: Suggest what to do on systems with too much RAM (bnc#1105536). - x86/speculation/l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (bnc#1012382). - x86/speculation: Add asm/msr-index.h dependency (bnc#1012382). - x86/speculation: Add basic IBPB (Indirect Branch Prediction Barrier) support (bnc#1012382). - x86/speculation: Clean up various Spectre related details (bnc#1012382). - x86/speculation: Correct Speculation Control microcode blacklist again (bnc#1012382). - x86/speculation: Move firmware_restrict_branch_speculation_*() from C to CPP (bnc#1012382). - x86/speculation: Update Speculation Control microcode blacklist (bnc#1012382). - x86/speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (bsc#1106369). - x86/speculation: Use IBRS if available before calling into firmware (bnc#1012382). - x86/speculation: Use Indirect Branch Prediction Barrier in context switch (bnc#1012382). - x86/xen: Add call of speculative_store_bypass_ht_init() to PV paths (bnc#1012382). - xen-netfront: wait xenbus state change when load module manually (bnc#1012382). - xen/blkback: do not keep persistent grants too long (bsc#1085042). - xen/blkback: move persistent grants flags to bool (bsc#1085042). - xen/blkfront: cleanup stale persistent grants (bsc#1085042). - xen/blkfront: reorder tests in xlblk_init() (bsc#1085042). - xen/netfront: do not cache skb_shinfo() (bnc#1012382). - xen: set cpu capabilities from xen_start_kernel() (bnc#1012382). - xfrm: fix missing dst_release() after policy blocking lbcast and multicast (bnc#1012382). - xfrm: free skb if nlsk pointer is NULL (bnc#1012382). - xfrm_user: prevent leaking 2 bytes of kernel memory (bnc#1012382). - xfs: Remove dead code from inode recover function (bsc#1105396). - xfs: repair malformed inode items during log recovery (bsc#1105396). - xhci: Fix perceived dead host due to runtime suspend race with event handler (bnc#1012382). - zswap: re-check zswap_is_full() after do zswap_shrink() (bnc#1012382). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1016=1 Package List: - openSUSE Leap 42.3 (x86_64): kernel-debug-4.4.155-68.1 kernel-debug-base-4.4.155-68.1 kernel-debug-base-debuginfo-4.4.155-68.1 kernel-debug-debuginfo-4.4.155-68.1 kernel-debug-debugsource-4.4.155-68.1 kernel-debug-devel-4.4.155-68.1 kernel-debug-devel-debuginfo-4.4.155-68.1 kernel-default-4.4.155-68.1 kernel-default-base-4.4.155-68.1 kernel-default-base-debuginfo-4.4.155-68.1 kernel-default-debuginfo-4.4.155-68.1 kernel-default-debugsource-4.4.155-68.1 kernel-default-devel-4.4.155-68.1 kernel-obs-build-4.4.155-68.1 kernel-obs-build-debugsource-4.4.155-68.1 kernel-obs-qa-4.4.155-68.1 kernel-syms-4.4.155-68.1 kernel-vanilla-4.4.155-68.1 kernel-vanilla-base-4.4.155-68.1 kernel-vanilla-base-debuginfo-4.4.155-68.1 kernel-vanilla-debuginfo-4.4.155-68.1 kernel-vanilla-debugsource-4.4.155-68.1 kernel-vanilla-devel-4.4.155-68.1 - openSUSE Leap 42.3 (noarch): kernel-devel-4.4.155-68.1 kernel-docs-4.4.155-68.1 kernel-docs-html-4.4.155-68.1 kernel-docs-pdf-4.4.155-68.1 kernel-macros-4.4.155-68.1 kernel-source-4.4.155-68.1 kernel-source-vanilla-4.4.155-68.1 References: https://www.suse.com/security/cve/CVE-2018-10902.html https://www.suse.com/security/cve/CVE-2018-10938.html https://www.suse.com/security/cve/CVE-2018-10940.html https://www.suse.com/security/cve/CVE-2018-1128.html https://www.suse.com/security/cve/CVE-2018-1129.html https://www.suse.com/security/cve/CVE-2018-12896.html https://www.suse.com/security/cve/CVE-2018-13093.html https://www.suse.com/security/cve/CVE-2018-13094.html https://www.suse.com/security/cve/CVE-2018-13095.html https://www.suse.com/security/cve/CVE-2018-15572.html https://www.suse.com/security/cve/CVE-2018-16658.html https://www.suse.com/security/cve/CVE-2018-6554.html https://www.suse.com/security/cve/CVE-2018-6555.html https://www.suse.com/security/cve/CVE-2018-9363.html https://bugzilla.suse.com/1012382 https://bugzilla.suse.com/1015342 https://bugzilla.suse.com/1015343 https://bugzilla.suse.com/1017967 https://bugzilla.suse.com/1019695 https://bugzilla.suse.com/1019699 https://bugzilla.suse.com/1020412 https://bugzilla.suse.com/1021121 https://bugzilla.suse.com/1022604 https://bugzilla.suse.com/1024361 https://bugzilla.suse.com/1024365 https://bugzilla.suse.com/1024376 https://bugzilla.suse.com/1027968 https://bugzilla.suse.com/1030552 https://bugzilla.suse.com/1031492 https://bugzilla.suse.com/1033962 https://bugzilla.suse.com/1042286 https://bugzilla.suse.com/1048317 https://bugzilla.suse.com/1050431 https://bugzilla.suse.com/1053685 https://bugzilla.suse.com/1055014 https://bugzilla.suse.com/1056596 https://bugzilla.suse.com/1062604 https://bugzilla.suse.com/1063646 https://bugzilla.suse.com/1064232 https://bugzilla.suse.com/1065364 https://bugzilla.suse.com/1066223 https://bugzilla.suse.com/1068032 https://bugzilla.suse.com/1068075 https://bugzilla.suse.com/1069138 https://bugzilla.suse.com/1078921 https://bugzilla.suse.com/1080157 https://bugzilla.suse.com/1083663 https://bugzilla.suse.com/1085042 https://bugzilla.suse.com/1085536 https://bugzilla.suse.com/1085539 https://bugzilla.suse.com/1087092 https://bugzilla.suse.com/1089066 https://bugzilla.suse.com/1090888 https://bugzilla.suse.com/1091171 https://bugzilla.suse.com/1091860 https://bugzilla.suse.com/1092903 https://bugzilla.suse.com/1096254 https://bugzilla.suse.com/1096748 https://bugzilla.suse.com/1097105 https://bugzilla.suse.com/1098253 https://bugzilla.suse.com/1098822 https://bugzilla.suse.com/1099597 https://bugzilla.suse.com/1099810 https://bugzilla.suse.com/1099832 https://bugzilla.suse.com/1099922 https://bugzilla.suse.com/1099999 https://bugzilla.suse.com/1100000 https://bugzilla.suse.com/1100001 https://bugzilla.suse.com/1100132 https://bugzilla.suse.com/1101822 https://bugzilla.suse.com/1102346 https://bugzilla.suse.com/1102486 https://bugzilla.suse.com/1102517 https://bugzilla.suse.com/1102715 https://bugzilla.suse.com/1102797 https://bugzilla.suse.com/1104485 https://bugzilla.suse.com/1104683 https://bugzilla.suse.com/1104897 https://bugzilla.suse.com/1105271 https://bugzilla.suse.com/1105292 https://bugzilla.suse.com/1105296 https://bugzilla.suse.com/1105322 https://bugzilla.suse.com/1105323 https://bugzilla.suse.com/1105392 https://bugzilla.suse.com/1105396 https://bugzilla.suse.com/1105524 https://bugzilla.suse.com/1105536 https://bugzilla.suse.com/1105769 https://bugzilla.suse.com/1106016 https://bugzilla.suse.com/1106105 https://bugzilla.suse.com/1106185 https://bugzilla.suse.com/1106191 https://bugzilla.suse.com/1106229 https://bugzilla.suse.com/1106271 https://bugzilla.suse.com/1106275 https://bugzilla.suse.com/1106276 https://bugzilla.suse.com/1106278 https://bugzilla.suse.com/1106281 https://bugzilla.suse.com/1106283 https://bugzilla.suse.com/1106369 https://bugzilla.suse.com/1106509 https://bugzilla.suse.com/1106511 https://bugzilla.suse.com/1106697 https://bugzilla.suse.com/1106929 https://bugzilla.suse.com/1106934 https://bugzilla.suse.com/1106995 https://bugzilla.suse.com/1107060 https://bugzilla.suse.com/1107078 https://bugzilla.suse.com/1107319 https://bugzilla.suse.com/1107320 https://bugzilla.suse.com/1107689 https://bugzilla.suse.com/1107735 https://bugzilla.suse.com/1107937 https://bugzilla.suse.com/1107966 https://bugzilla.suse.com/963575 https://bugzilla.suse.com/966170 https://bugzilla.suse.com/966172 https://bugzilla.suse.com/969470 https://bugzilla.suse.com/969476 https://bugzilla.suse.com/969477 https://bugzilla.suse.com/970506 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2736-1: moderate: Security update for curl
by opensuse-security＠opensuse.org 15 Sep '18

15 Sep '18

openSUSE Security Update: Security update for curl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2736-1 Rating: moderate References: #1089533 #1106019 Cross-References: CVE-2018-14618 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for curl fixes the following issues: This security issue was fixed: - CVE-2018-14618: Prevent integer overflow in the NTLM authentication code (bsc#1106019) This non-security issue was fixed: - Fixed erroneous debug message when paired with OpenSSL (bsc#1089533) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1008=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): curl-7.37.0-39.1 curl-debuginfo-7.37.0-39.1 curl-debugsource-7.37.0-39.1 libcurl-devel-7.37.0-39.1 libcurl4-7.37.0-39.1 libcurl4-debuginfo-7.37.0-39.1 - openSUSE Leap 42.3 (x86_64): libcurl-devel-32bit-7.37.0-39.1 libcurl4-32bit-7.37.0-39.1 libcurl4-debuginfo-32bit-7.37.0-39.1 References: https://www.suse.com/security/cve/CVE-2018-14618.html https://bugzilla.suse.com/1089533 https://bugzilla.suse.com/1106019 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2734-1: Security update for ffmpeg-4
by opensuse-security＠opensuse.org 15 Sep '18

15 Sep '18

openSUSE Security Update: Security update for ffmpeg-4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2734-1 Rating: low References: #1092241 #1100348 #1105869 Cross-References: CVE-2018-13300 CVE-2018-15822 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for ffmpeg-4 to version 4.0.2 fixes the following issues: These security issues were fixed: - CVE-2018-15822: The flv_write_packet function did not check for an empty audio packet, leading to an assertion failure and DoS (bsc#1105869). - CVE-2018-13300: An improper argument passed to the avpriv_request_sample function may have triggered an out-of-array read while converting a crafted AVI file to MPEG4, leading to a denial of service and possibly an information disclosure (bsc#1100348). These non-security issues were fixed: - Enable webvtt encoders and decoders (boo#1092241). - Build codec2 encoder and decoder, add libcodec2 to enable_decoders and enable_encoders. - Enable mpeg 1 and 2 encoders. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-1004=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): ffmpeg-4-libavcodec-devel-4.0.2-13.1 ffmpeg-4-libavdevice-devel-4.0.2-13.1 ffmpeg-4-libavfilter-devel-4.0.2-13.1 ffmpeg-4-libavformat-devel-4.0.2-13.1 ffmpeg-4-libavresample-devel-4.0.2-13.1 ffmpeg-4-libavutil-devel-4.0.2-13.1 ffmpeg-4-libpostproc-devel-4.0.2-13.1 ffmpeg-4-libswresample-devel-4.0.2-13.1 ffmpeg-4-libswscale-devel-4.0.2-13.1 ffmpeg-4-private-devel-4.0.2-13.1 libavcodec58-4.0.2-13.1 libavdevice58-4.0.2-13.1 libavfilter7-4.0.2-13.1 libavformat58-4.0.2-13.1 libavresample4-4.0.2-13.1 libavutil56-4.0.2-13.1 libpostproc55-4.0.2-13.1 libswresample3-4.0.2-13.1 libswscale5-4.0.2-13.1 References: https://www.suse.com/security/cve/CVE-2018-13300.html https://www.suse.com/security/cve/CVE-2018-15822.html https://bugzilla.suse.com/1092241 https://bugzilla.suse.com/1100348 https://bugzilla.suse.com/1105869 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2733-1: moderate: Security update for okular
by opensuse-security＠opensuse.org 15 Sep '18

15 Sep '18

openSUSE Security Update: Security update for okular ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2733-1 Rating: moderate References: #1107591 Cross-References: CVE-2018-1000801 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for okular fixes the following security issue: - CVE-2018-1000801: Prevent directory traversal vulnerability in function unpackDocumentArchive could have resulted in arbitrary file creation via a specially crafted Okular archive (bsc#1107591). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1006=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1006=1 Package List: - openSUSE Leap 42.3 (x86_64): okular-17.04.2-6.1 okular-debuginfo-17.04.2-6.1 okular-debugsource-17.04.2-6.1 okular-devel-17.04.2-6.1 - openSUSE Leap 42.3 (noarch): okular-lang-17.04.2-6.1 - openSUSE Leap 15.0 (x86_64): okular-17.12.3-lp150.3.3.1 okular-debuginfo-17.12.3-lp150.3.3.1 okular-debugsource-17.12.3-lp150.3.3.1 okular-devel-17.12.3-lp150.3.3.1 - openSUSE Leap 15.0 (noarch): okular-lang-17.12.3-lp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-1000801.html https://bugzilla.suse.com/1107591 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2731-1: moderate: Security update for curl
by opensuse-security＠opensuse.org 15 Sep '18

15 Sep '18

openSUSE Security Update: Security update for curl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2731-1 Rating: moderate References: #1086367 #1106019 Cross-References: CVE-2018-14618 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for curl fixes the following issues: This security issue was fixed: - CVE-2018-14618: Prevent integer overflow in the NTLM authentication code (bsc#1106019) This non-security issue was fixed: - Use OPENSSL_config instead of CONF_modules_load_file() to avoid crashes due to openssl engines conflicts (bsc#1086367) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1010=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): curl-7.60.0-lp150.2.12.1 curl-debuginfo-7.60.0-lp150.2.12.1 curl-debugsource-7.60.0-lp150.2.12.1 curl-mini-7.60.0-lp150.2.12.1 curl-mini-debuginfo-7.60.0-lp150.2.12.1 curl-mini-debugsource-7.60.0-lp150.2.12.1 libcurl-devel-7.60.0-lp150.2.12.1 libcurl-mini-devel-7.60.0-lp150.2.12.1 libcurl4-7.60.0-lp150.2.12.1 libcurl4-debuginfo-7.60.0-lp150.2.12.1 libcurl4-mini-7.60.0-lp150.2.12.1 libcurl4-mini-debuginfo-7.60.0-lp150.2.12.1 - openSUSE Leap 15.0 (x86_64): libcurl-devel-32bit-7.60.0-lp150.2.12.1 libcurl4-32bit-7.60.0-lp150.2.12.1 libcurl4-32bit-debuginfo-7.60.0-lp150.2.12.1 References: https://www.suse.com/security/cve/CVE-2018-14618.html https://bugzilla.suse.com/1086367 https://bugzilla.suse.com/1106019 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2730-1: important: Security update for spice-gtk
by opensuse-security＠opensuse.org 15 Sep '18

15 Sep '18

openSUSE Security Update: Security update for spice-gtk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2730-1 Rating: important References: #1101295 #1101420 #1104448 Cross-References: CVE-2018-10873 CVE-2018-10893 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for spice-gtk fixes the following issues: Security issues fixed: - CVE-2018-10873: Fix potential heap corruption when demarshalling (bsc#1104448) - CVE-2018-10893: Avoid buffer overflow on image lz checks (bsc#1101295) Other bugs fixed: - Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1015=1 Package List: - openSUSE Leap 15.0 (x86_64): libspice-client-glib-2_0-8-0.34-lp150.2.3.1 libspice-client-glib-2_0-8-debuginfo-0.34-lp150.2.3.1 libspice-client-glib-helper-0.34-lp150.2.3.1 libspice-client-glib-helper-debuginfo-0.34-lp150.2.3.1 libspice-client-gtk-3_0-5-0.34-lp150.2.3.1 libspice-client-gtk-3_0-5-debuginfo-0.34-lp150.2.3.1 libspice-controller0-0.34-lp150.2.3.1 libspice-controller0-debuginfo-0.34-lp150.2.3.1 spice-gtk-0.34-lp150.2.3.1 spice-gtk-debuginfo-0.34-lp150.2.3.1 spice-gtk-debugsource-0.34-lp150.2.3.1 spice-gtk-devel-0.34-lp150.2.3.1 typelib-1_0-SpiceClientGlib-2_0-0.34-lp150.2.3.1 typelib-1_0-SpiceClientGtk-3_0-0.34-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): spice-gtk-lang-0.34-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-10873.html https://www.suse.com/security/cve/CVE-2018-10893.html https://bugzilla.suse.com/1101295 https://bugzilla.suse.com/1101420 https://bugzilla.suse.com/1104448 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2728-1: moderate: Security update for chromium
by opensuse-security＠opensuse.org 15 Sep '18

15 Sep '18

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2728-1 Rating: moderate References: #1108114 #1108175 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for Chromium to version 69.0.3497.92 fixes the following issues: Security issues fixed ((boo#1108114): - Function signature mismatch in WebAssembly - URL Spoofing in Omnibox The following tracked packaging issues were fixed: - the chromium package incorrectly provied swiftshader resolvables (boo#1108175) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1005=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1005=1 Package List: - openSUSE Leap 42.3 (x86_64): chromedriver-69.0.3497.92-171.1 chromedriver-debuginfo-69.0.3497.92-171.1 chromium-69.0.3497.92-171.1 chromium-debuginfo-69.0.3497.92-171.1 chromium-debugsource-69.0.3497.92-171.1 - openSUSE Leap 15.0 (x86_64): chromedriver-69.0.3497.92-lp150.2.13.1 chromedriver-debuginfo-69.0.3497.92-lp150.2.13.1 chromium-69.0.3497.92-lp150.2.13.1 chromium-debuginfo-69.0.3497.92-lp150.2.13.1 chromium-debugsource-69.0.3497.92-lp150.2.13.1 References: https://bugzilla.suse.com/1108114 https://bugzilla.suse.com/1108175 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2727-1: moderate: Security update for okular
by opensuse-security＠opensuse.org 15 Sep '18

15 Sep '18

openSUSE Security Update: Security update for okular ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2727-1 Rating: moderate References: #1107591 Cross-References: CVE-2018-1000801 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for okular fixes the following security issue: - CVE-2018-1000801: Prevent directory traversal vulnerability in function unpackDocumentArchive could have resulted in arbitrary file creation via a specially crafted Okular archive (bsc#1107591). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-1006=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): okular-17.04.2-11.1 okular-debuginfo-17.04.2-11.1 okular-debugsource-17.04.2-11.1 okular-devel-17.04.2-11.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): okular-lang-17.04.2-11.1 References: https://www.suse.com/security/cve/CVE-2018-1000801.html https://bugzilla.suse.com/1107591 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2724-1: moderate: Security update for chromium
by opensuse-security＠opensuse.org 15 Sep '18

15 Sep '18

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2724-1 Rating: moderate References: #1108114 #1108175 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for Chromium to version 69.0.3497.92 fixes the following issues: Security issues fixed ((boo#1108114): - Function signature mismatch in WebAssembly - URL Spoofing in Omnibox The following tracked packaging issues were fixed: - the chromium package incorrectly provied swiftshader resolvables (boo#1108175) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-1005=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-69.0.3497.92-68.1 chromedriver-debuginfo-69.0.3497.92-68.1 chromium-69.0.3497.92-68.1 chromium-debuginfo-69.0.3497.92-68.1 chromium-debugsource-69.0.3497.92-68.1 References: https://bugzilla.suse.com/1108114 https://bugzilla.suse.com/1108175 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2723-1: Security update for ffmpeg-4
by opensuse-security＠opensuse.org 15 Sep '18

15 Sep '18

openSUSE Security Update: Security update for ffmpeg-4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2723-1 Rating: low References: #1092241 #1100348 #1105869 Cross-References: CVE-2018-13300 CVE-2018-15822 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for ffmpeg-4 to version 4.0.2 fixes the following issues: These security issues were fixed: - CVE-2018-15822: The flv_write_packet function did not check for an empty audio packet, leading to an assertion failure and DoS (bsc#1105869). - CVE-2018-13300: An improper argument passed to the avpriv_request_sample function may have triggered an out-of-array read while converting a crafted AVI file to MPEG4, leading to a denial of service and possibly an information disclosure (bsc#1100348). These non-security issues were fixed: - Enable webvtt encoders and decoders (boo#1092241). - Build codec2 encoder and decoder, add libcodec2 to enable_decoders and enable_encoders. - Enable mpeg 1 and 2 encoders. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1004=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1004=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ffmpeg-4-debugsource-4.0.2-13.1 ffmpeg-4-libavcodec-devel-4.0.2-13.1 ffmpeg-4-libavdevice-devel-4.0.2-13.1 ffmpeg-4-libavfilter-devel-4.0.2-13.1 ffmpeg-4-libavformat-devel-4.0.2-13.1 ffmpeg-4-libavresample-devel-4.0.2-13.1 ffmpeg-4-libavutil-devel-4.0.2-13.1 ffmpeg-4-libpostproc-devel-4.0.2-13.1 ffmpeg-4-libswresample-devel-4.0.2-13.1 ffmpeg-4-libswscale-devel-4.0.2-13.1 ffmpeg-4-private-devel-4.0.2-13.1 libavcodec58-4.0.2-13.1 libavcodec58-debuginfo-4.0.2-13.1 libavdevice58-4.0.2-13.1 libavdevice58-debuginfo-4.0.2-13.1 libavfilter7-4.0.2-13.1 libavfilter7-debuginfo-4.0.2-13.1 libavformat58-4.0.2-13.1 libavformat58-debuginfo-4.0.2-13.1 libavresample4-4.0.2-13.1 libavresample4-debuginfo-4.0.2-13.1 libavutil56-4.0.2-13.1 libavutil56-debuginfo-4.0.2-13.1 libpostproc55-4.0.2-13.1 libpostproc55-debuginfo-4.0.2-13.1 libswresample3-4.0.2-13.1 libswresample3-debuginfo-4.0.2-13.1 libswscale5-4.0.2-13.1 libswscale5-debuginfo-4.0.2-13.1 - openSUSE Leap 42.3 (x86_64): libavcodec58-32bit-4.0.2-13.1 libavcodec58-debuginfo-32bit-4.0.2-13.1 libavdevice58-32bit-4.0.2-13.1 libavdevice58-debuginfo-32bit-4.0.2-13.1 libavfilter7-32bit-4.0.2-13.1 libavfilter7-debuginfo-32bit-4.0.2-13.1 libavformat58-32bit-4.0.2-13.1 libavformat58-debuginfo-32bit-4.0.2-13.1 libavresample4-32bit-4.0.2-13.1 libavresample4-debuginfo-32bit-4.0.2-13.1 libavutil56-32bit-4.0.2-13.1 libavutil56-debuginfo-32bit-4.0.2-13.1 libpostproc55-32bit-4.0.2-13.1 libpostproc55-debuginfo-32bit-4.0.2-13.1 libswresample3-32bit-4.0.2-13.1 libswresample3-debuginfo-32bit-4.0.2-13.1 libswscale5-32bit-4.0.2-13.1 libswscale5-debuginfo-32bit-4.0.2-13.1 - openSUSE Leap 15.0 (x86_64): ffmpeg-4-debugsource-4.0.2-lp150.13.1 ffmpeg-4-libavcodec-devel-4.0.2-lp150.13.1 ffmpeg-4-libavdevice-devel-4.0.2-lp150.13.1 ffmpeg-4-libavfilter-devel-4.0.2-lp150.13.1 ffmpeg-4-libavformat-devel-4.0.2-lp150.13.1 ffmpeg-4-libavresample-devel-4.0.2-lp150.13.1 ffmpeg-4-libavutil-devel-4.0.2-lp150.13.1 ffmpeg-4-libpostproc-devel-4.0.2-lp150.13.1 ffmpeg-4-libswresample-devel-4.0.2-lp150.13.1 ffmpeg-4-libswscale-devel-4.0.2-lp150.13.1 ffmpeg-4-private-devel-4.0.2-lp150.13.1 libavcodec58-4.0.2-lp150.13.1 libavcodec58-debuginfo-4.0.2-lp150.13.1 libavdevice58-4.0.2-lp150.13.1 libavdevice58-debuginfo-4.0.2-lp150.13.1 libavfilter7-4.0.2-lp150.13.1 libavfilter7-debuginfo-4.0.2-lp150.13.1 libavformat58-4.0.2-lp150.13.1 libavformat58-debuginfo-4.0.2-lp150.13.1 libavresample4-4.0.2-lp150.13.1 libavresample4-debuginfo-4.0.2-lp150.13.1 libavutil56-4.0.2-lp150.13.1 libavutil56-debuginfo-4.0.2-lp150.13.1 libpostproc55-4.0.2-lp150.13.1 libpostproc55-debuginfo-4.0.2-lp150.13.1 libswresample3-4.0.2-lp150.13.1 libswresample3-debuginfo-4.0.2-lp150.13.1 libswscale5-4.0.2-lp150.13.1 libswscale5-debuginfo-4.0.2-lp150.13.1 References: https://www.suse.com/security/cve/CVE-2018-13300.html https://www.suse.com/security/cve/CVE-2018-15822.html https://bugzilla.suse.com/1092241 https://bugzilla.suse.com/1100348 https://bugzilla.suse.com/1105869 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2712-1: moderate: Security update for python3
by opensuse-security＠opensuse.org 14 Sep '18

14 Sep '18

openSUSE Security Update: Security update for python3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2712-1 Rating: moderate References: #1086001 #1088004 #1088009 #1107030 Cross-References: CVE-2018-1060 CVE-2018-1061 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for python3 provides the following fixes: These security issues were fixed: - CVE-2018-1061: Prevent catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could have used this flaw to cause denial of service (bsc#1088004). - CVE-2018-1060: Prevent catastrophic backtracking in pop3lib's apop() method. An attacker could have used this flaw to cause denial of service (bsc#1088009). These non-security issues were fixed: - Sort files and directories when creating tarfile archives so that they are created in a more predictable way. (bsc#1086001) - Add -fwrapv to OPTS (bsc#1107030) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1001=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libpython3_4m1_0-3.4.6-12.6.1 libpython3_4m1_0-debuginfo-3.4.6-12.6.1 python3-3.4.6-12.6.1 python3-base-3.4.6-12.6.1 python3-base-debuginfo-3.4.6-12.6.1 python3-base-debugsource-3.4.6-12.6.1 python3-curses-3.4.6-12.6.1 python3-curses-debuginfo-3.4.6-12.6.1 python3-dbm-3.4.6-12.6.1 python3-dbm-debuginfo-3.4.6-12.6.1 python3-debuginfo-3.4.6-12.6.1 python3-debugsource-3.4.6-12.6.1 python3-devel-3.4.6-12.6.1 python3-devel-debuginfo-3.4.6-12.6.1 python3-idle-3.4.6-12.6.1 python3-testsuite-3.4.6-12.6.1 python3-testsuite-debuginfo-3.4.6-12.6.1 python3-tk-3.4.6-12.6.1 python3-tk-debuginfo-3.4.6-12.6.1 python3-tools-3.4.6-12.6.1 - openSUSE Leap 42.3 (x86_64): libpython3_4m1_0-32bit-3.4.6-12.6.1 libpython3_4m1_0-debuginfo-32bit-3.4.6-12.6.1 python3-32bit-3.4.6-12.6.1 python3-base-32bit-3.4.6-12.6.1 python3-base-debuginfo-32bit-3.4.6-12.6.1 python3-debuginfo-32bit-3.4.6-12.6.1 - openSUSE Leap 42.3 (noarch): python3-doc-3.4.6-12.6.1 python3-doc-pdf-3.4.6-12.6.1 References: https://www.suse.com/security/cve/CVE-2018-1060.html https://www.suse.com/security/cve/CVE-2018-1061.html https://bugzilla.suse.com/1086001 https://bugzilla.suse.com/1088004 https://bugzilla.suse.com/1088009 https://bugzilla.suse.com/1107030 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2695-1: moderate: Security update for compat-openssl098
by opensuse-security＠opensuse.org 12 Sep '18

12 Sep '18

openSUSE Security Update: Security update for compat-openssl098 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2695-1 Rating: moderate References: #1087102 #1089039 #1097158 #1097624 #1098592 Cross-References: CVE-2018-0732 CVE-2018-0737 CVE-2018-0739 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves three vulnerabilities and has two fixes is now available. Description: This update for compat-openssl098 fixes the following security issues: - CVE-2018-0732: During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server could have sent a very large prime value to the client. This caused the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack (bsc#1097158) - Blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592) - CVE-2018-0737: The RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could have recovered the private key (bsc#1089039) - CVE-2018-0739: Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could have resulted in DoS (bsc#1087102). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-997=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): compat-openssl098-debugsource-0.9.8j-24.1 libopenssl0_9_8-0.9.8j-24.1 libopenssl0_9_8-debuginfo-0.9.8j-24.1 - openSUSE Leap 42.3 (x86_64): libopenssl0_9_8-32bit-0.9.8j-24.1 libopenssl0_9_8-debuginfo-32bit-0.9.8j-24.1 References: https://www.suse.com/security/cve/CVE-2018-0732.html https://www.suse.com/security/cve/CVE-2018-0737.html https://www.suse.com/security/cve/CVE-2018-0739.html https://bugzilla.suse.com/1087102 https://bugzilla.suse.com/1089039 https://bugzilla.suse.com/1097158 https://bugzilla.suse.com/1097624 https://bugzilla.suse.com/1098592 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2694-1: moderate: Security update for php5
by opensuse-security＠opensuse.org 12 Sep '18

12 Sep '18

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2694-1 Rating: moderate References: #1096984 #1099098 #1103659 #1105466 Cross-References: CVE-2017-9118 CVE-2018-10360 CVE-2018-12882 CVE-2018-14851 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for php5 fixes the following issues: The following security issues were fixed: - CVE-2018-10360: Fixed an out-of-bounds read in the do_core_note function in readelf.c in libmagic.a, which allowed remote attackers to cause a denial of service via a crafted ELF file (bsc#1096984) - CVE-2018-14851: Fixed an out-of-bound read in exif_process_IFD_in_MAKERNOTE, which could be exploited by an attacker via crafted JPG files, and could result in an application crash. (bsc#1103659) - CVE-2018-12882: Fixed an use-after-free in exif_read_from_impl in ext/exif/exif.c (bsc#1099098) - CVE-2017-9118: Fixed an out of bounds access in php_pcre_replace_impl via a crafted preg_replace call (bsc#1105466) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-998=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-mod_php5-5.5.14-103.1 apache2-mod_php5-debuginfo-5.5.14-103.1 php5-5.5.14-103.1 php5-bcmath-5.5.14-103.1 php5-bcmath-debuginfo-5.5.14-103.1 php5-bz2-5.5.14-103.1 php5-bz2-debuginfo-5.5.14-103.1 php5-calendar-5.5.14-103.1 php5-calendar-debuginfo-5.5.14-103.1 php5-ctype-5.5.14-103.1 php5-ctype-debuginfo-5.5.14-103.1 php5-curl-5.5.14-103.1 php5-curl-debuginfo-5.5.14-103.1 php5-dba-5.5.14-103.1 php5-dba-debuginfo-5.5.14-103.1 php5-debuginfo-5.5.14-103.1 php5-debugsource-5.5.14-103.1 php5-devel-5.5.14-103.1 php5-dom-5.5.14-103.1 php5-dom-debuginfo-5.5.14-103.1 php5-enchant-5.5.14-103.1 php5-enchant-debuginfo-5.5.14-103.1 php5-exif-5.5.14-103.1 php5-exif-debuginfo-5.5.14-103.1 php5-fastcgi-5.5.14-103.1 php5-fastcgi-debuginfo-5.5.14-103.1 php5-fileinfo-5.5.14-103.1 php5-fileinfo-debuginfo-5.5.14-103.1 php5-firebird-5.5.14-103.1 php5-firebird-debuginfo-5.5.14-103.1 php5-fpm-5.5.14-103.1 php5-fpm-debuginfo-5.5.14-103.1 php5-ftp-5.5.14-103.1 php5-ftp-debuginfo-5.5.14-103.1 php5-gd-5.5.14-103.1 php5-gd-debuginfo-5.5.14-103.1 php5-gettext-5.5.14-103.1 php5-gettext-debuginfo-5.5.14-103.1 php5-gmp-5.5.14-103.1 php5-gmp-debuginfo-5.5.14-103.1 php5-iconv-5.5.14-103.1 php5-iconv-debuginfo-5.5.14-103.1 php5-imap-5.5.14-103.1 php5-imap-debuginfo-5.5.14-103.1 php5-intl-5.5.14-103.1 php5-intl-debuginfo-5.5.14-103.1 php5-json-5.5.14-103.1 php5-json-debuginfo-5.5.14-103.1 php5-ldap-5.5.14-103.1 php5-ldap-debuginfo-5.5.14-103.1 php5-mbstring-5.5.14-103.1 php5-mbstring-debuginfo-5.5.14-103.1 php5-mcrypt-5.5.14-103.1 php5-mcrypt-debuginfo-5.5.14-103.1 php5-mssql-5.5.14-103.1 php5-mssql-debuginfo-5.5.14-103.1 php5-mysql-5.5.14-103.1 php5-mysql-debuginfo-5.5.14-103.1 php5-odbc-5.5.14-103.1 php5-odbc-debuginfo-5.5.14-103.1 php5-opcache-5.5.14-103.1 php5-opcache-debuginfo-5.5.14-103.1 php5-openssl-5.5.14-103.1 php5-openssl-debuginfo-5.5.14-103.1 php5-pcntl-5.5.14-103.1 php5-pcntl-debuginfo-5.5.14-103.1 php5-pdo-5.5.14-103.1 php5-pdo-debuginfo-5.5.14-103.1 php5-pgsql-5.5.14-103.1 php5-pgsql-debuginfo-5.5.14-103.1 php5-phar-5.5.14-103.1 php5-phar-debuginfo-5.5.14-103.1 php5-posix-5.5.14-103.1 php5-posix-debuginfo-5.5.14-103.1 php5-pspell-5.5.14-103.1 php5-pspell-debuginfo-5.5.14-103.1 php5-readline-5.5.14-103.1 php5-readline-debuginfo-5.5.14-103.1 php5-shmop-5.5.14-103.1 php5-shmop-debuginfo-5.5.14-103.1 php5-snmp-5.5.14-103.1 php5-snmp-debuginfo-5.5.14-103.1 php5-soap-5.5.14-103.1 php5-soap-debuginfo-5.5.14-103.1 php5-sockets-5.5.14-103.1 php5-sockets-debuginfo-5.5.14-103.1 php5-sqlite-5.5.14-103.1 php5-sqlite-debuginfo-5.5.14-103.1 php5-suhosin-5.5.14-103.1 php5-suhosin-debuginfo-5.5.14-103.1 php5-sysvmsg-5.5.14-103.1 php5-sysvmsg-debuginfo-5.5.14-103.1 php5-sysvsem-5.5.14-103.1 php5-sysvsem-debuginfo-5.5.14-103.1 php5-sysvshm-5.5.14-103.1 php5-sysvshm-debuginfo-5.5.14-103.1 php5-tidy-5.5.14-103.1 php5-tidy-debuginfo-5.5.14-103.1 php5-tokenizer-5.5.14-103.1 php5-tokenizer-debuginfo-5.5.14-103.1 php5-wddx-5.5.14-103.1 php5-wddx-debuginfo-5.5.14-103.1 php5-xmlreader-5.5.14-103.1 php5-xmlreader-debuginfo-5.5.14-103.1 php5-xmlrpc-5.5.14-103.1 php5-xmlrpc-debuginfo-5.5.14-103.1 php5-xmlwriter-5.5.14-103.1 php5-xmlwriter-debuginfo-5.5.14-103.1 php5-xsl-5.5.14-103.1 php5-xsl-debuginfo-5.5.14-103.1 php5-zip-5.5.14-103.1 php5-zip-debuginfo-5.5.14-103.1 php5-zlib-5.5.14-103.1 php5-zlib-debuginfo-5.5.14-103.1 - openSUSE Leap 42.3 (noarch): php5-pear-5.5.14-103.1 References: https://www.suse.com/security/cve/CVE-2017-9118.html https://www.suse.com/security/cve/CVE-2018-10360.html https://www.suse.com/security/cve/CVE-2018-12882.html https://www.suse.com/security/cve/CVE-2018-14851.html https://bugzilla.suse.com/1096984 https://bugzilla.suse.com/1099098 https://bugzilla.suse.com/1103659 https://bugzilla.suse.com/1105466 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2693-1: moderate: Security update for qemu
by opensuse-security＠opensuse.org 12 Sep '18

12 Sep '18

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2693-1 Rating: moderate References: #1094898 #1098735 #1102604 #1103628 #1105279 Cross-References: CVE-2018-12617 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has four fixes is now available. Description: This update for qemu fixes the following issues: This security issue was fixed: - CVE-2018-12617: qmp_guest_file_read had an integer overflow that could have been exploited by sending a crafted QMP command (including guest-file-read with a large count value) to the agent via the listening socket causing DoS (bsc#1098735) These non-security issues were fixed: - Allow kvm group access to /dev/sev (bsc#1102604). - Fix for the value used for reduced_phys_bits. Please update the reduced_phys_bits value used on the commandline or in libvirt XML to the value 1 (explicitly set now in QEMU code). (bsc#1103628) - Fix (again) the qemu guest agent udev rule file, which got unfixed in a series of unfortunate events (bsc#1094898 and now bsc#1105279) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-996=1 Package List: - openSUSE Leap 15.0 (noarch): qemu-ipxe-1.0.0-lp150.7.9.1 qemu-seabios-1.11.0-lp150.7.9.1 qemu-sgabios-8-lp150.7.9.1 qemu-vgabios-1.11.0-lp150.7.9.1 - openSUSE Leap 15.0 (x86_64): qemu-2.11.2-lp150.7.9.1 qemu-arm-2.11.2-lp150.7.9.1 qemu-arm-debuginfo-2.11.2-lp150.7.9.1 qemu-block-curl-2.11.2-lp150.7.9.1 qemu-block-curl-debuginfo-2.11.2-lp150.7.9.1 qemu-block-dmg-2.11.2-lp150.7.9.1 qemu-block-dmg-debuginfo-2.11.2-lp150.7.9.1 qemu-block-gluster-2.11.2-lp150.7.9.1 qemu-block-gluster-debuginfo-2.11.2-lp150.7.9.1 qemu-block-iscsi-2.11.2-lp150.7.9.1 qemu-block-iscsi-debuginfo-2.11.2-lp150.7.9.1 qemu-block-rbd-2.11.2-lp150.7.9.1 qemu-block-rbd-debuginfo-2.11.2-lp150.7.9.1 qemu-block-ssh-2.11.2-lp150.7.9.1 qemu-block-ssh-debuginfo-2.11.2-lp150.7.9.1 qemu-debuginfo-2.11.2-lp150.7.9.1 qemu-debugsource-2.11.2-lp150.7.9.1 qemu-extra-2.11.2-lp150.7.9.1 qemu-extra-debuginfo-2.11.2-lp150.7.9.1 qemu-guest-agent-2.11.2-lp150.7.9.1 qemu-guest-agent-debuginfo-2.11.2-lp150.7.9.1 qemu-ksm-2.11.2-lp150.7.9.1 qemu-kvm-2.11.2-lp150.7.9.1 qemu-lang-2.11.2-lp150.7.9.1 qemu-linux-user-2.11.2-lp150.7.9.1 qemu-linux-user-debuginfo-2.11.2-lp150.7.9.1 qemu-linux-user-debugsource-2.11.2-lp150.7.9.1 qemu-ppc-2.11.2-lp150.7.9.1 qemu-ppc-debuginfo-2.11.2-lp150.7.9.1 qemu-s390-2.11.2-lp150.7.9.1 qemu-s390-debuginfo-2.11.2-lp150.7.9.1 qemu-testsuite-2.11.2-lp150.7.9.1 qemu-tools-2.11.2-lp150.7.9.1 qemu-tools-debuginfo-2.11.2-lp150.7.9.1 qemu-x86-2.11.2-lp150.7.9.1 qemu-x86-debuginfo-2.11.2-lp150.7.9.1 References: https://www.suse.com/security/cve/CVE-2018-12617.html https://bugzilla.suse.com/1094898 https://bugzilla.suse.com/1098735 https://bugzilla.suse.com/1102604 https://bugzilla.suse.com/1103628 https://bugzilla.suse.com/1105279 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2674-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 08 Sep '18

08 Sep '18

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2674-1 Rating: important References: #1066489 #1107343 Cross-References: CVE-2017-16541 CVE-2018-12376 CVE-2018-12377 CVE-2018-12378 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update to Mozilla Firefox 60.2.0esr fixes the following issues: Security issues fixed (MFSA 2018-21, boo#1107343): - CVE-2018-12377: Use-after-free in refresh driver timers - CVE-2018-12378: Use-after-free in IndexedDB - CVE-2017-16541: Proxy bypass using automount and autofs (boo#1066489) - CVE-2018-12376: Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-995=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-995=1 Package List: - openSUSE Leap 42.3 (x86_64): MozillaFirefox-60.2.0-109.1 MozillaFirefox-branding-upstream-60.2.0-109.1 MozillaFirefox-buildsymbols-60.2.0-109.1 MozillaFirefox-debuginfo-60.2.0-109.1 MozillaFirefox-debugsource-60.2.0-109.1 MozillaFirefox-devel-60.2.0-109.1 MozillaFirefox-translations-common-60.2.0-109.1 MozillaFirefox-translations-other-60.2.0-109.1 - openSUSE Leap 15.0 (x86_64): MozillaFirefox-60.2.0-lp150.3.14.1 MozillaFirefox-branding-upstream-60.2.0-lp150.3.14.1 MozillaFirefox-buildsymbols-60.2.0-lp150.3.14.1 MozillaFirefox-debuginfo-60.2.0-lp150.3.14.1 MozillaFirefox-debugsource-60.2.0-lp150.3.14.1 MozillaFirefox-devel-60.2.0-lp150.3.14.1 MozillaFirefox-translations-common-60.2.0-lp150.3.14.1 MozillaFirefox-translations-other-60.2.0-lp150.3.14.1 References: https://www.suse.com/security/cve/CVE-2017-16541.html https://www.suse.com/security/cve/CVE-2018-12376.html https://www.suse.com/security/cve/CVE-2018-12377.html https://www.suse.com/security/cve/CVE-2018-12378.html https://bugzilla.suse.com/1066489 https://bugzilla.suse.com/1107343 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2672-1: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 08 Sep '18

08 Sep '18

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2672-1 Rating: low References: #1106855 Cross-References: CVE-2018-16323 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for GraphicsMagick fixes the following security issue: - CVE-2018-16323: ReadXBMImage left data uninitialized when processing an XBM file that has a negative pixel value. If the affected code was used as a library loaded into a process that includes sensitive information, that information sometimes can be leaked via the image data (bsc#1106855). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-993=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): GraphicsMagick-1.3.25-102.1 GraphicsMagick-debuginfo-1.3.25-102.1 GraphicsMagick-debugsource-1.3.25-102.1 GraphicsMagick-devel-1.3.25-102.1 libGraphicsMagick++-Q16-12-1.3.25-102.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.25-102.1 libGraphicsMagick++-devel-1.3.25-102.1 libGraphicsMagick-Q16-3-1.3.25-102.1 libGraphicsMagick-Q16-3-debuginfo-1.3.25-102.1 libGraphicsMagick3-config-1.3.25-102.1 libGraphicsMagickWand-Q16-2-1.3.25-102.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.25-102.1 perl-GraphicsMagick-1.3.25-102.1 perl-GraphicsMagick-debuginfo-1.3.25-102.1 References: https://www.suse.com/security/cve/CVE-2018-16323.html https://bugzilla.suse.com/1106855 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2667-1: moderate: Security update for nodejs4
by opensuse-security＠opensuse.org 08 Sep '18

08 Sep '18

openSUSE Security Update: Security update for nodejs4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2667-1 Rating: moderate References: #1082318 #1091764 #1097158 #1097748 #1105019 Cross-References: CVE-2018-0732 CVE-2018-12115 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has three fixes is now available. Description: This update for nodejs4 fixes the following issues: Security issues fixed: - CVE-2018-12115: Fixed an out-of-bounds memory write in Buffer that could be used to write to memory outside of a Buffer's memory space buffer (bsc#1105019) - Upgrade to OpenSSL 1.0.2p, which fixed: - CVE-2018-0732: Client denial-of-service due to large DH parameter (bsc#1097158) - ECDSA key extraction via local side-channel Other changes made: - Recommend same major version npm package (bsc#1097748) - Use absolute paths in executable shebang lines - Fix building with ICU61.1 (bsc#1091764) - Install license with %license, not %doc (bsc#1082318) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-991=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): nodejs4-4.9.1-17.1 nodejs4-debuginfo-4.9.1-17.1 nodejs4-debugsource-4.9.1-17.1 nodejs4-devel-4.9.1-17.1 npm4-4.9.1-17.1 - openSUSE Leap 42.3 (noarch): nodejs4-docs-4.9.1-17.1 References: https://www.suse.com/security/cve/CVE-2018-0732.html https://www.suse.com/security/cve/CVE-2018-12115.html https://bugzilla.suse.com/1082318 https://bugzilla.suse.com/1091764 https://bugzilla.suse.com/1097158 https://bugzilla.suse.com/1097748 https://bugzilla.suse.com/1105019 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2664-1: important: Security update for chromium
by opensuse-security＠opensuse.org 08 Sep '18

08 Sep '18

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2664-1 Rating: important References: #1106341 #1107235 Cross-References: CVE-2017-15430 CVE-2018-16065 CVE-2018-16066 CVE-2018-16067 CVE-2018-16068 CVE-2018-16069 CVE-2018-16070 CVE-2018-16071 CVE-2018-16073 CVE-2018-16074 CVE-2018-16075 CVE-2018-16076 CVE-2018-16077 CVE-2018-16078 CVE-2018-16079 CVE-2018-16080 CVE-2018-16081 CVE-2018-16082 CVE-2018-16083 CVE-2018-16084 CVE-2018-16085 CVE-2018-16086 CVE-2018-16087 CVE-2018-16088 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 24 vulnerabilities is now available. Description: This update for Chromium to version 69.0.3497.81 fixes multiple issues. Security issues fixed (boo#1107235): - CVE-2018-16065: Out of bounds write in V8 - CVE-2018-16066:Out of bounds read in Blink - CVE-2018-16067: Out of bounds read in WebAudio - CVE-2018-16068: Out of bounds write in Mojo - CVE-2018-16069:Out of bounds read in SwiftShader - CVE-2018-16070: Integer overflow in Skia - CVE-2018-16071: Use after free in WebRTC - CVE-2018-16073: Site Isolation bypass after tab restore - CVE-2018-16074: Site Isolation bypass using Blob URLS - Out of bounds read in Little-CMS - CVE-2018-16075: Local file access in Blink - CVE-2018-16076: Out of bounds read in PDFium - CVE-2018-16077: Content security policy bypass in Blink - CVE-2018-16078: Credit card information leak in Autofill - CVE-2018-16079: URL spoof in permission dialogs - CVE-2018-16080: URL spoof in full screen mode - CVE-2018-16081: Local file access in DevTools - CVE-2018-16082: Stack buffer overflow in SwiftShader - CVE-2018-16083: Out of bounds read in WebRTC - CVE-2018-16084: User confirmation bypass in external protocol handling - CVE-2018-16085: Use after free in Memory Instrumentation - CVE-2017-15430: Unsafe navigation in Chromecast (boo#1106341) - CVE-2018-16086: Script injection in New Tab Page - CVE-2018-16087: Multiple download restriction bypass - CVE-2018-16088: User gesture requirement bypass The re2 regular expression library was updated to the current version 2018-09-01. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-979=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-979=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libre2-0-20180901-18.1 libre2-0-debuginfo-20180901-18.1 re2-debugsource-20180901-18.1 re2-devel-20180901-18.1 - openSUSE Leap 42.3 (x86_64): chromedriver-69.0.3497.81-168.1 chromedriver-debuginfo-69.0.3497.81-168.1 chromium-69.0.3497.81-168.1 chromium-debuginfo-69.0.3497.81-168.1 chromium-debugsource-69.0.3497.81-168.1 libre2-0-32bit-20180901-18.1 libre2-0-debuginfo-32bit-20180901-18.1 - openSUSE Leap 15.0 (i586 x86_64): libre2-0-20180901-lp150.7.3.1 libre2-0-debuginfo-20180901-lp150.7.3.1 re2-debugsource-20180901-lp150.7.3.1 re2-devel-20180901-lp150.7.3.1 - openSUSE Leap 15.0 (x86_64): chromedriver-69.0.3497.81-lp150.2.10.1 chromedriver-debuginfo-69.0.3497.81-lp150.2.10.1 chromium-69.0.3497.81-lp150.2.10.1 chromium-debuginfo-69.0.3497.81-lp150.2.10.1 chromium-debugsource-69.0.3497.81-lp150.2.10.1 libre2-0-32bit-20180901-lp150.7.3.1 libre2-0-32bit-debuginfo-20180901-lp150.7.3.1 References: https://www.suse.com/security/cve/CVE-2017-15430.html https://www.suse.com/security/cve/CVE-2018-16065.html https://www.suse.com/security/cve/CVE-2018-16066.html https://www.suse.com/security/cve/CVE-2018-16067.html https://www.suse.com/security/cve/CVE-2018-16068.html https://www.suse.com/security/cve/CVE-2018-16069.html https://www.suse.com/security/cve/CVE-2018-16070.html https://www.suse.com/security/cve/CVE-2018-16071.html https://www.suse.com/security/cve/CVE-2018-16073.html https://www.suse.com/security/cve/CVE-2018-16074.html https://www.suse.com/security/cve/CVE-2018-16075.html https://www.suse.com/security/cve/CVE-2018-16076.html https://www.suse.com/security/cve/CVE-2018-16077.html https://www.suse.com/security/cve/CVE-2018-16078.html https://www.suse.com/security/cve/CVE-2018-16079.html https://www.suse.com/security/cve/CVE-2018-16080.html https://www.suse.com/security/cve/CVE-2018-16081.html https://www.suse.com/security/cve/CVE-2018-16082.html https://www.suse.com/security/cve/CVE-2018-16083.html https://www.suse.com/security/cve/CVE-2018-16084.html https://www.suse.com/security/cve/CVE-2018-16085.html https://www.suse.com/security/cve/CVE-2018-16086.html https://www.suse.com/security/cve/CVE-2018-16087.html https://www.suse.com/security/cve/CVE-2018-16088.html https://bugzilla.suse.com/1106341 https://bugzilla.suse.com/1107235 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2659-1: important: Security update for chromium
by opensuse-security＠opensuse.org 08 Sep '18

08 Sep '18

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2659-1 Rating: important References: #1106341 #1107235 Cross-References: CVE-2017-15430 CVE-2018-16065 CVE-2018-16066 CVE-2018-16067 CVE-2018-16068 CVE-2018-16069 CVE-2018-16070 CVE-2018-16071 CVE-2018-16073 CVE-2018-16074 CVE-2018-16075 CVE-2018-16076 CVE-2018-16077 CVE-2018-16078 CVE-2018-16079 CVE-2018-16080 CVE-2018-16081 CVE-2018-16082 CVE-2018-16083 CVE-2018-16084 CVE-2018-16085 CVE-2018-16086 CVE-2018-16087 CVE-2018-16088 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 24 vulnerabilities is now available. Description: This update for Chromium to version 69.0.3497.81 fixes multiple issues. Security issues fixed (boo#1107235): - CVE-2018-16065: Out of bounds write in V8 - CVE-2018-16066:Out of bounds read in Blink - CVE-2018-16067: Out of bounds read in WebAudio - CVE-2018-16068: Out of bounds write in Mojo - CVE-2018-16069:Out of bounds read in SwiftShader - CVE-2018-16070: Integer overflow in Skia - CVE-2018-16071: Use after free in WebRTC - CVE-2018-16073: Site Isolation bypass after tab restore - CVE-2018-16074: Site Isolation bypass using Blob URLS - Out of bounds read in Little-CMS - CVE-2018-16075: Local file access in Blink - CVE-2018-16076: Out of bounds read in PDFium - CVE-2018-16077: Content security policy bypass in Blink - CVE-2018-16078: Credit card information leak in Autofill - CVE-2018-16079: URL spoof in permission dialogs - CVE-2018-16080: URL spoof in full screen mode - CVE-2018-16081: Local file access in DevTools - CVE-2018-16082: Stack buffer overflow in SwiftShader - CVE-2018-16083: Out of bounds read in WebRTC - CVE-2018-16084: User confirmation bypass in external protocol handling - CVE-2018-16085: Use after free in Memory Instrumentation - CVE-2017-15430: Unsafe navigation in Chromecast (boo#1106341) - CVE-2018-16086: Script injection in New Tab Page - CVE-2018-16087: Multiple download restriction bypass - CVE-2018-16088: User gesture requirement bypass The re2 regular expression library was updated to the current version 2018-09-01. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-979=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 s390x x86_64): libre2-0-20180901-11.1 libre2-0-debuginfo-20180901-11.1 re2-debugsource-20180901-11.1 re2-devel-20180901-11.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (ppc64le): libre2-0-20180901-11.2 libre2-0-debuginfo-20180901-11.2 re2-debugsource-20180901-11.2 re2-devel-20180901-11.2 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-69.0.3497.81-65.1 chromedriver-debuginfo-69.0.3497.81-65.1 chromium-69.0.3497.81-65.1 chromium-debuginfo-69.0.3497.81-65.1 chromium-debugsource-69.0.3497.81-65.1 References: https://www.suse.com/security/cve/CVE-2017-15430.html https://www.suse.com/security/cve/CVE-2018-16065.html https://www.suse.com/security/cve/CVE-2018-16066.html https://www.suse.com/security/cve/CVE-2018-16067.html https://www.suse.com/security/cve/CVE-2018-16068.html https://www.suse.com/security/cve/CVE-2018-16069.html https://www.suse.com/security/cve/CVE-2018-16070.html https://www.suse.com/security/cve/CVE-2018-16071.html https://www.suse.com/security/cve/CVE-2018-16073.html https://www.suse.com/security/cve/CVE-2018-16074.html https://www.suse.com/security/cve/CVE-2018-16075.html https://www.suse.com/security/cve/CVE-2018-16076.html https://www.suse.com/security/cve/CVE-2018-16077.html https://www.suse.com/security/cve/CVE-2018-16078.html https://www.suse.com/security/cve/CVE-2018-16079.html https://www.suse.com/security/cve/CVE-2018-16080.html https://www.suse.com/security/cve/CVE-2018-16081.html https://www.suse.com/security/cve/CVE-2018-16082.html https://www.suse.com/security/cve/CVE-2018-16083.html https://www.suse.com/security/cve/CVE-2018-16084.html https://www.suse.com/security/cve/CVE-2018-16085.html https://www.suse.com/security/cve/CVE-2018-16086.html https://www.suse.com/security/cve/CVE-2018-16087.html https://www.suse.com/security/cve/CVE-2018-16088.html https://bugzilla.suse.com/1106341 https://bugzilla.suse.com/1107235 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2658-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 08 Sep '18

08 Sep '18

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2658-1 Rating: important References: #1084603 #1098998 Cross-References: CVE-2018-12359 CVE-2018-12360 CVE-2018-12361 CVE-2018-12362 CVE-2018-12363 CVE-2018-12364 CVE-2018-12365 CVE-2018-12366 CVE-2018-12367 CVE-2018-12371 CVE-2018-5156 CVE-2018-5187 CVE-2018-5188 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: This update for MozillaThunderbird to version 60.0 fixes the following issues: These security issues were fixed: - CVE-2018-12359: Prevent buffer overflow using computed size of canvas element (bsc#1098998). - CVE-2018-12360: Prevent use-after-free when using focus() (bsc#1098998). - CVE-2018-12361: Prevent integer overflow in SwizzleData (bsc#1098998). - CVE-2018-12362: Prevent integer overflow in SSSE3 scaler (bsc#1098998). - CVE-2018-5156: Prevent media recorder segmentation fault when track type is changed during capture (bsc#1098998). - CVE-2018-12363: Prevent use-after-free when appending DOM nodes (bsc#1098998). - CVE-2018-12364: Prevent CSRF attacks through 307 redirects and NPAPI plugins (bsc#1098998). - CVE-2018-12365: Prevent compromised IPC child process listing local filenames (bsc#1098998). - CVE-2018-12371: Prevent integer overflow in Skia library during edge builder allocation (bsc#1098998). - CVE-2018-12366: Prevent invalid data handling during QCMS transformations (bsc#1098998). - CVE-2018-12367: Timing attack mitigation of PerformanceNavigationTiming (bsc#1098998). - CVE-2018-5187: Various memory safety bugs (bsc#1098998). - CVE-2018-5188: Various memory safety bugs (bsc#1098998). These can not, in general, be exploited through email, but are potential risks in browser or browser-like contexts. These non-security issues were fixed: - Storing of remote content settings fixed (bsc#1084603) - Improved message handling and composing - Improved handling of message templates - Support for OAuth2 and FIDO U2F - Various Calendar improvements - Various fixes and changes to e-mail workflow - Various IMAP fixes - Native desktop notifications Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-994=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-994=1 Package List: - openSUSE Leap 42.3 (x86_64): MozillaThunderbird-60.0-74.1 MozillaThunderbird-buildsymbols-60.0-74.1 MozillaThunderbird-debuginfo-60.0-74.1 MozillaThunderbird-debugsource-60.0-74.1 MozillaThunderbird-translations-common-60.0-74.1 MozillaThunderbird-translations-other-60.0-74.1 - openSUSE Leap 15.0 (x86_64): MozillaThunderbird-60.0-lp150.3.14.1 MozillaThunderbird-buildsymbols-60.0-lp150.3.14.1 MozillaThunderbird-debuginfo-60.0-lp150.3.14.1 MozillaThunderbird-debugsource-60.0-lp150.3.14.1 MozillaThunderbird-translations-common-60.0-lp150.3.14.1 MozillaThunderbird-translations-other-60.0-lp150.3.14.1 References: https://www.suse.com/security/cve/CVE-2018-12359.html https://www.suse.com/security/cve/CVE-2018-12360.html https://www.suse.com/security/cve/CVE-2018-12361.html https://www.suse.com/security/cve/CVE-2018-12362.html https://www.suse.com/security/cve/CVE-2018-12363.html https://www.suse.com/security/cve/CVE-2018-12364.html https://www.suse.com/security/cve/CVE-2018-12365.html https://www.suse.com/security/cve/CVE-2018-12366.html https://www.suse.com/security/cve/CVE-2018-12367.html https://www.suse.com/security/cve/CVE-2018-12371.html https://www.suse.com/security/cve/CVE-2018-5156.html https://www.suse.com/security/cve/CVE-2018-5187.html https://www.suse.com/security/cve/CVE-2018-5188.html https://bugzilla.suse.com/1084603 https://bugzilla.suse.com/1098998 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2648-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 07 Sep '18

07 Sep '18

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2648-1 Rating: moderate References: #1105466 Cross-References: CVE-2017-9118 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for php7 fixes the following issues: - CVE-2017-9118: Fixed an out of bounds access in php_pcre_replace_impl via a crafted preg_replace call (bsc#1105466) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-976=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-mod_php7-7.0.7-46.1 apache2-mod_php7-debuginfo-7.0.7-46.1 php7-7.0.7-46.1 php7-bcmath-7.0.7-46.1 php7-bcmath-debuginfo-7.0.7-46.1 php7-bz2-7.0.7-46.1 php7-bz2-debuginfo-7.0.7-46.1 php7-calendar-7.0.7-46.1 php7-calendar-debuginfo-7.0.7-46.1 php7-ctype-7.0.7-46.1 php7-ctype-debuginfo-7.0.7-46.1 php7-curl-7.0.7-46.1 php7-curl-debuginfo-7.0.7-46.1 php7-dba-7.0.7-46.1 php7-dba-debuginfo-7.0.7-46.1 php7-debuginfo-7.0.7-46.1 php7-debugsource-7.0.7-46.1 php7-devel-7.0.7-46.1 php7-dom-7.0.7-46.1 php7-dom-debuginfo-7.0.7-46.1 php7-enchant-7.0.7-46.1 php7-enchant-debuginfo-7.0.7-46.1 php7-exif-7.0.7-46.1 php7-exif-debuginfo-7.0.7-46.1 php7-fastcgi-7.0.7-46.1 php7-fastcgi-debuginfo-7.0.7-46.1 php7-fileinfo-7.0.7-46.1 php7-fileinfo-debuginfo-7.0.7-46.1 php7-firebird-7.0.7-46.1 php7-firebird-debuginfo-7.0.7-46.1 php7-fpm-7.0.7-46.1 php7-fpm-debuginfo-7.0.7-46.1 php7-ftp-7.0.7-46.1 php7-ftp-debuginfo-7.0.7-46.1 php7-gd-7.0.7-46.1 php7-gd-debuginfo-7.0.7-46.1 php7-gettext-7.0.7-46.1 php7-gettext-debuginfo-7.0.7-46.1 php7-gmp-7.0.7-46.1 php7-gmp-debuginfo-7.0.7-46.1 php7-iconv-7.0.7-46.1 php7-iconv-debuginfo-7.0.7-46.1 php7-imap-7.0.7-46.1 php7-imap-debuginfo-7.0.7-46.1 php7-intl-7.0.7-46.1 php7-intl-debuginfo-7.0.7-46.1 php7-json-7.0.7-46.1 php7-json-debuginfo-7.0.7-46.1 php7-ldap-7.0.7-46.1 php7-ldap-debuginfo-7.0.7-46.1 php7-mbstring-7.0.7-46.1 php7-mbstring-debuginfo-7.0.7-46.1 php7-mcrypt-7.0.7-46.1 php7-mcrypt-debuginfo-7.0.7-46.1 php7-mysql-7.0.7-46.1 php7-mysql-debuginfo-7.0.7-46.1 php7-odbc-7.0.7-46.1 php7-odbc-debuginfo-7.0.7-46.1 php7-opcache-7.0.7-46.1 php7-opcache-debuginfo-7.0.7-46.1 php7-openssl-7.0.7-46.1 php7-openssl-debuginfo-7.0.7-46.1 php7-pcntl-7.0.7-46.1 php7-pcntl-debuginfo-7.0.7-46.1 php7-pdo-7.0.7-46.1 php7-pdo-debuginfo-7.0.7-46.1 php7-pgsql-7.0.7-46.1 php7-pgsql-debuginfo-7.0.7-46.1 php7-phar-7.0.7-46.1 php7-phar-debuginfo-7.0.7-46.1 php7-posix-7.0.7-46.1 php7-posix-debuginfo-7.0.7-46.1 php7-pspell-7.0.7-46.1 php7-pspell-debuginfo-7.0.7-46.1 php7-readline-7.0.7-46.1 php7-readline-debuginfo-7.0.7-46.1 php7-shmop-7.0.7-46.1 php7-shmop-debuginfo-7.0.7-46.1 php7-snmp-7.0.7-46.1 php7-snmp-debuginfo-7.0.7-46.1 php7-soap-7.0.7-46.1 php7-soap-debuginfo-7.0.7-46.1 php7-sockets-7.0.7-46.1 php7-sockets-debuginfo-7.0.7-46.1 php7-sqlite-7.0.7-46.1 php7-sqlite-debuginfo-7.0.7-46.1 php7-sysvmsg-7.0.7-46.1 php7-sysvmsg-debuginfo-7.0.7-46.1 php7-sysvsem-7.0.7-46.1 php7-sysvsem-debuginfo-7.0.7-46.1 php7-sysvshm-7.0.7-46.1 php7-sysvshm-debuginfo-7.0.7-46.1 php7-tidy-7.0.7-46.1 php7-tidy-debuginfo-7.0.7-46.1 php7-tokenizer-7.0.7-46.1 php7-tokenizer-debuginfo-7.0.7-46.1 php7-wddx-7.0.7-46.1 php7-wddx-debuginfo-7.0.7-46.1 php7-xmlreader-7.0.7-46.1 php7-xmlreader-debuginfo-7.0.7-46.1 php7-xmlrpc-7.0.7-46.1 php7-xmlrpc-debuginfo-7.0.7-46.1 php7-xmlwriter-7.0.7-46.1 php7-xmlwriter-debuginfo-7.0.7-46.1 php7-xsl-7.0.7-46.1 php7-xsl-debuginfo-7.0.7-46.1 php7-zip-7.0.7-46.1 php7-zip-debuginfo-7.0.7-46.1 php7-zlib-7.0.7-46.1 php7-zlib-debuginfo-7.0.7-46.1 - openSUSE Leap 42.3 (noarch): php7-pear-7.0.7-46.1 php7-pear-Archive_Tar-7.0.7-46.1 References: https://www.suse.com/security/cve/CVE-2017-9118.html https://bugzilla.suse.com/1105466 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2645-1: moderate: Security update for apache-pdfbox
by opensuse-security＠opensuse.org 07 Sep '18

07 Sep '18

openSUSE Security Update: Security update for apache-pdfbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2645-1 Rating: moderate References: #1099721 Cross-References: CVE-2018-8036 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for apache-pdfbox fixes the following issues: Security issue fixed: - CVE-2018-8036: Fix infinite loop while parsing files that leads to an out of memory issue (bsc#1099721). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-975=1 Package List: - openSUSE Leap 15.0 (noarch): apache-pdfbox-1.8.12-lp150.4.3.1 apache-pdfbox-javadoc-1.8.12-lp150.4.3.1 References: https://www.suse.com/security/cve/CVE-2018-8036.html https://bugzilla.suse.com/1099721 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2642-1: important: Security update for dovecot22
by opensuse-security＠opensuse.org 06 Sep '18

06 Sep '18

openSUSE Security Update: Security update for dovecot22 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2642-1 Rating: important References: #1082828 Cross-References: CVE-2017-15130 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for dovecot22 fixes the following issues: Security issue fixed: - CVE-2017-15130: Fixed a potential denial of service via TLS SNI config lookups, which would slow the process down and could have led to exhaustive memory allocation and/or process restarts (bsc#1082828) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-973=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): dovecot22-2.2.31-2.9.1 dovecot22-backend-mysql-2.2.31-2.9.1 dovecot22-backend-mysql-debuginfo-2.2.31-2.9.1 dovecot22-backend-pgsql-2.2.31-2.9.1 dovecot22-backend-pgsql-debuginfo-2.2.31-2.9.1 dovecot22-backend-sqlite-2.2.31-2.9.1 dovecot22-backend-sqlite-debuginfo-2.2.31-2.9.1 dovecot22-debuginfo-2.2.31-2.9.1 dovecot22-debugsource-2.2.31-2.9.1 dovecot22-devel-2.2.31-2.9.1 dovecot22-fts-2.2.31-2.9.1 dovecot22-fts-debuginfo-2.2.31-2.9.1 dovecot22-fts-lucene-2.2.31-2.9.1 dovecot22-fts-lucene-debuginfo-2.2.31-2.9.1 dovecot22-fts-solr-2.2.31-2.9.1 dovecot22-fts-solr-debuginfo-2.2.31-2.9.1 dovecot22-fts-squat-2.2.31-2.9.1 dovecot22-fts-squat-debuginfo-2.2.31-2.9.1 References: https://www.suse.com/security/cve/CVE-2017-15130.html https://bugzilla.suse.com/1082828 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2628-1: moderate: Security update for wireshark
by opensuse-security＠opensuse.org 05 Sep '18

05 Sep '18

openSUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2628-1 Rating: moderate References: #1106514 Cross-References: CVE-2018-16056 CVE-2018-16057 CVE-2018-16058 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for wireshark to version 2.4.9 fixes the following issues: Security issues fixed (bsc#1106514): - CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44) - CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45) - CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46) Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-972=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libwireshark9-2.4.9-lp150.2.10.1 libwireshark9-debuginfo-2.4.9-lp150.2.10.1 libwiretap7-2.4.9-lp150.2.10.1 libwiretap7-debuginfo-2.4.9-lp150.2.10.1 libwscodecs1-2.4.9-lp150.2.10.1 libwscodecs1-debuginfo-2.4.9-lp150.2.10.1 libwsutil8-2.4.9-lp150.2.10.1 libwsutil8-debuginfo-2.4.9-lp150.2.10.1 wireshark-2.4.9-lp150.2.10.1 wireshark-debuginfo-2.4.9-lp150.2.10.1 wireshark-debugsource-2.4.9-lp150.2.10.1 wireshark-devel-2.4.9-lp150.2.10.1 wireshark-ui-qt-2.4.9-lp150.2.10.1 wireshark-ui-qt-debuginfo-2.4.9-lp150.2.10.1 References: https://www.suse.com/security/cve/CVE-2018-16056.html https://www.suse.com/security/cve/CVE-2018-16057.html https://www.suse.com/security/cve/CVE-2018-16058.html https://bugzilla.suse.com/1106514 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2623-1: Security update for yubico-piv-tool
by opensuse-security＠opensuse.org 05 Sep '18

05 Sep '18

openSUSE Security Update: Security update for yubico-piv-tool ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2623-1 Rating: low References: #1104809 #1104811 Cross-References: CVE-2018-14779 CVE-2018-14780 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for yubico-piv-tool fixes the following issues: Security issues fixed: - CVE-2018-14779: Fixed an buffer overflow and an out of bounds memory read in ykpiv_transfer_data(), which could be triggered by a malicious token. (boo#1104809, YSA-2018-03) - CVE-2018-14780: Fixed an buffer overflow and an out of bounds memory read in _ykpiv_fetch_object(), which could be triggered by a malicious token. (boo#1104811, YSA-2018-03) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-969=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libykpiv-devel-0.1.6-7.3.1 libykpiv1-0.1.6-7.3.1 libykpiv1-debuginfo-0.1.6-7.3.1 yubico-piv-tool-0.1.6-7.3.1 yubico-piv-tool-debuginfo-0.1.6-7.3.1 yubico-piv-tool-debugsource-0.1.6-7.3.1 References: https://www.suse.com/security/cve/CVE-2018-14779.html https://www.suse.com/security/cve/CVE-2018-14780.html https://bugzilla.suse.com/1104809 https://bugzilla.suse.com/1104811 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2602-1: important: Security update for spice
by opensuse-security＠opensuse.org 04 Sep '18

04 Sep '18

openSUSE Security Update: Security update for spice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2602-1 Rating: important References: #1101295 #1104448 Cross-References: CVE-2018-10873 CVE-2018-10893 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for spice fixes the following issues: Security issues fixed: - CVE-2018-10873: Fix potential heap corruption when demarshalling (bsc#1104448) - CVE-2018-10893: Avoid buffer overflow on image lz checks (bsc#1101295) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-957=1 Package List: - openSUSE Leap 42.3 (x86_64): libspice-server-devel-0.12.8-7.1 libspice-server1-0.12.8-7.1 libspice-server1-debuginfo-0.12.8-7.1 spice-debugsource-0.12.8-7.1 References: https://www.suse.com/security/cve/CVE-2018-10873.html https://www.suse.com/security/cve/CVE-2018-10893.html https://bugzilla.suse.com/1101295 https://bugzilla.suse.com/1104448 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2601-1: important: Security update for spice-gtk
by opensuse-security＠opensuse.org 04 Sep '18

04 Sep '18

openSUSE Security Update: Security update for spice-gtk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2601-1 Rating: important References: #1101295 #1104448 Cross-References: CVE-2018-10873 CVE-2018-10893 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for spice-gtk fixes the following issues: Security issues fixed: - CVE-2018-10873: Fix potential heap corruption when demarshalling (bsc#1104448) - CVE-2018-10893: Avoid buffer overflow on image lz checks (bsc#1101295) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-958=1 Package List: - openSUSE Leap 42.3 (noarch): spice-gtk-lang-0.33-2.7.1 - openSUSE Leap 42.3 (x86_64): libspice-client-glib-2_0-8-0.33-2.7.1 libspice-client-glib-2_0-8-debuginfo-0.33-2.7.1 libspice-client-glib-helper-0.33-2.7.1 libspice-client-glib-helper-debuginfo-0.33-2.7.1 libspice-client-gtk-3_0-5-0.33-2.7.1 libspice-client-gtk-3_0-5-debuginfo-0.33-2.7.1 libspice-controller0-0.33-2.7.1 libspice-controller0-debuginfo-0.33-2.7.1 spice-gtk-0.33-2.7.1 spice-gtk-debuginfo-0.33-2.7.1 spice-gtk-debugsource-0.33-2.7.1 spice-gtk-devel-0.33-2.7.1 typelib-1_0-SpiceClientGlib-2_0-0.33-2.7.1 typelib-1_0-SpiceClientGtk-3_0-0.33-2.7.1 References: https://www.suse.com/security/cve/CVE-2018-10873.html https://www.suse.com/security/cve/CVE-2018-10893.html https://bugzilla.suse.com/1101295 https://bugzilla.suse.com/1104448 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2600-1: important: Security update for ImageMagick
by opensuse-security＠opensuse.org 04 Sep '18

04 Sep '18

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2600-1 Rating: important References: #1105592 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for ImageMagick fixes the following issues: Security issue fixed: - Disable PS, PS2, PS3, XPS and PDF coders in default policy.xml (bsc#1105592) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-954=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): ImageMagick-7.0.7.34-lp150.2.12.1 ImageMagick-debuginfo-7.0.7.34-lp150.2.12.1 ImageMagick-debugsource-7.0.7.34-lp150.2.12.1 ImageMagick-devel-7.0.7.34-lp150.2.12.1 ImageMagick-extra-7.0.7.34-lp150.2.12.1 ImageMagick-extra-debuginfo-7.0.7.34-lp150.2.12.1 libMagick++-7_Q16HDRI4-7.0.7.34-lp150.2.12.1 libMagick++-7_Q16HDRI4-debuginfo-7.0.7.34-lp150.2.12.1 libMagick++-devel-7.0.7.34-lp150.2.12.1 libMagickCore-7_Q16HDRI6-7.0.7.34-lp150.2.12.1 libMagickCore-7_Q16HDRI6-debuginfo-7.0.7.34-lp150.2.12.1 libMagickWand-7_Q16HDRI6-7.0.7.34-lp150.2.12.1 libMagickWand-7_Q16HDRI6-debuginfo-7.0.7.34-lp150.2.12.1 perl-PerlMagick-7.0.7.34-lp150.2.12.1 perl-PerlMagick-debuginfo-7.0.7.34-lp150.2.12.1 - openSUSE Leap 15.0 (x86_64): ImageMagick-devel-32bit-7.0.7.34-lp150.2.12.1 libMagick++-7_Q16HDRI4-32bit-7.0.7.34-lp150.2.12.1 libMagick++-7_Q16HDRI4-32bit-debuginfo-7.0.7.34-lp150.2.12.1 libMagick++-devel-32bit-7.0.7.34-lp150.2.12.1 libMagickCore-7_Q16HDRI6-32bit-7.0.7.34-lp150.2.12.1 libMagickCore-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp150.2.12.1 libMagickWand-7_Q16HDRI6-32bit-7.0.7.34-lp150.2.12.1 libMagickWand-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp150.2.12.1 - openSUSE Leap 15.0 (noarch): ImageMagick-doc-7.0.7.34-lp150.2.12.1 References: https://bugzilla.suse.com/1105592 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2599-1: moderate: Security update for postgresql10
by opensuse-security＠opensuse.org 04 Sep '18

04 Sep '18

openSUSE Security Update: Security update for postgresql10 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2599-1 Rating: moderate References: #1091610 #1104199 #1104202 Cross-References: CVE-2018-10915 CVE-2018-10925 CVE-2018-1115 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for postgresql10 fixes the following issues: PostgreSQL 10 was updated to 10.5: - https://www.postgresql.org/about/news/1851/ - https://www.postgresql.org/docs/current/static/release-10-5.html A dump/restore is not required for those running 10.X. However, if you use the adminpack extension, you should update it as per the first changelog entry below. Also, if the function marking mistakes mentioned in the second and third changelog entries below affect you, you will want to take steps to correct your database catalogs. Security issues fixed: - CVE-2018-1115: Remove public execute privilege from contrib/adminpack's pg_logfile_rotate() function pg_logfile_rotate() is a deprecated wrapper for the core function pg_rotate_logfile(). When that function was changed to rely on SQL privileges for access control rather than a hard-coded superuser check, pg_logfile_rotate() should have been updated as well, but the need for this was missed. Hence, if adminpack is installed, any user could request a logfile rotation, creating a minor security issue. After installing this update, administrators should update adminpack by performing ALTER EXTENSION adminpack UPDATE in each database in which adminpack is installed (bsc#1091610). - CVE-2018-10915: libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with "host" or "hostaddr" connection parameters from untrusted input, attackers could have bypassed client-side connection security features, obtain access to higher privileged connections or potentially cause other impact SQL injection, by causing the PQescape() functions to malfunction (bsc#1104199) - CVE-2018-10925: Add missing authorization check on certain statements involved with "INSERT ... ON CONFLICT DO UPDATE". An attacker with "CREATE TABLE" privileges could have exploited this to read arbitrary bytes server memory. If the attacker also had certain "INSERT" and limited "UPDATE" privileges to a particular table, they could have exploited this to update other columns in the same table (bsc#1104202). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-955=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libecpg6-10.5-lp150.3.3.1 libecpg6-debuginfo-10.5-lp150.3.3.1 libpq5-10.5-lp150.3.3.1 libpq5-debuginfo-10.5-lp150.3.3.1 postgresql10-10.5-lp150.3.3.1 postgresql10-contrib-10.5-lp150.3.3.1 postgresql10-contrib-debuginfo-10.5-lp150.3.3.1 postgresql10-debuginfo-10.5-lp150.3.3.1 postgresql10-debugsource-10.5-lp150.3.3.1 postgresql10-devel-10.5-lp150.3.3.1 postgresql10-devel-debuginfo-10.5-lp150.3.3.1 postgresql10-plperl-10.5-lp150.3.3.1 postgresql10-plperl-debuginfo-10.5-lp150.3.3.1 postgresql10-plpython-10.5-lp150.3.3.1 postgresql10-plpython-debuginfo-10.5-lp150.3.3.1 postgresql10-pltcl-10.5-lp150.3.3.1 postgresql10-pltcl-debuginfo-10.5-lp150.3.3.1 postgresql10-server-10.5-lp150.3.3.1 postgresql10-server-debuginfo-10.5-lp150.3.3.1 postgresql10-test-10.5-lp150.3.3.1 - openSUSE Leap 15.0 (x86_64): libecpg6-32bit-10.5-lp150.3.3.1 libecpg6-32bit-debuginfo-10.5-lp150.3.3.1 libpq5-32bit-10.5-lp150.3.3.1 libpq5-32bit-debuginfo-10.5-lp150.3.3.1 - openSUSE Leap 15.0 (noarch): postgresql10-docs-10.5-lp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-10915.html https://www.suse.com/security/cve/CVE-2018-10925.html https://www.suse.com/security/cve/CVE-2018-1115.html https://bugzilla.suse.com/1091610 https://bugzilla.suse.com/1104199 https://bugzilla.suse.com/1104202 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2598-1: important: Security update for spice
by opensuse-security＠opensuse.org 04 Sep '18

04 Sep '18

openSUSE Security Update: Security update for spice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2598-1 Rating: important References: #1101295 #1104448 Cross-References: CVE-2018-10873 CVE-2018-10893 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for spice fixes the following issues: Security issues fixed: - CVE-2018-10873: Fix potential heap corruption when demarshalling (bsc#1104448) - CVE-2018-10893: Avoid buffer overflow on image lz checks (bsc#1101295) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-956=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libspice-server-devel-0.14.0-lp150.3.3.1 libspice-server1-0.14.0-lp150.3.3.1 libspice-server1-debuginfo-0.14.0-lp150.3.3.1 spice-debugsource-0.14.0-lp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-10873.html https://www.suse.com/security/cve/CVE-2018-10893.html https://bugzilla.suse.com/1101295 https://bugzilla.suse.com/1104448 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2597-1: moderate: Security update for libressl
by opensuse-security＠opensuse.org 03 Sep '18

03 Sep '18

openSUSE Security Update: Security update for libressl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2597-1 Rating: moderate References: #1065363 #1086778 #1097779 Cross-References: CVE-2018-12434 CVE-2018-8970 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for libressl to version 2.8.0 fixes the following issues: Security issues fixed: - CVE-2018-12434: Avoid a timing side-channel leak when generating DSA and ECDSA signatures. (boo#1097779) - Reject excessively large primes in DH key generation. - CVE-2018-8970: Fixed a bug in int_x509_param_set_hosts, calling strlen() if name length provided is 0 to match the OpenSSL behaviour. (boo#1086778) - Fixed an out-of-bounds read and crash in DES-fcrypt (boo#1065363) You can find a detailed list of changes [here](https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.8.0-relnotes .txt). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-953=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libcrypto43-2.8.0-11.1 libcrypto43-debuginfo-2.8.0-11.1 libressl-2.8.0-11.1 libressl-debuginfo-2.8.0-11.1 libressl-debugsource-2.8.0-11.1 libressl-devel-2.8.0-11.1 libssl45-2.8.0-11.1 libssl45-debuginfo-2.8.0-11.1 libtls17-2.8.0-11.1 libtls17-debuginfo-2.8.0-11.1 - openSUSE Leap 42.3 (x86_64): libcrypto43-32bit-2.8.0-11.1 libcrypto43-debuginfo-32bit-2.8.0-11.1 libressl-devel-32bit-2.8.0-11.1 libssl45-32bit-2.8.0-11.1 libssl45-debuginfo-32bit-2.8.0-11.1 libtls17-32bit-2.8.0-11.1 libtls17-debuginfo-32bit-2.8.0-11.1 - openSUSE Leap 42.3 (noarch): libressl-devel-doc-2.8.0-11.1 References: https://www.suse.com/security/cve/CVE-2018-12434.html https://www.suse.com/security/cve/CVE-2018-8970.html https://bugzilla.suse.com/1065363 https://bugzilla.suse.com/1086778 https://bugzilla.suse.com/1097779 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2592-1: moderate: Security update for libressl
by opensuse-security＠opensuse.org 03 Sep '18

03 Sep '18

openSUSE Security Update: Security update for libressl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2592-1 Rating: moderate References: #1097779 Cross-References: CVE-2018-12434 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libressl to version 2.8.0 fixes the following issues: Security issues fixed: - CVE-2018-12434: Avoid a timing side-channel leak when generating DSA and ECDSA signatures. (boo#1097779) - Reject excessively large primes in DH key generation. Other bugs fixed: - Fixed a pair of 20+ year-old bugs in X509_NAME_add_entry. - Tighten up checks for various X509_VERIFY_PARAM functions, 'poisoning' parameters so that an unverified certificate cannot be used if it fails verification. - Fixed a potential memory leak on failure in ASN1_item_digest. - Fixed a potential memory alignment crash in asn1_item_combine_free. - Removed unused SSL3_FLAGS_DELAY_CLIENT_FINISHED and SSL3_FLAGS_POP_BUFFER flags in write path, simplifying IO paths. - Removed SSL_OP_TLS_ROLLBACK_BUG buggy client workarounds. - Added const annotations to many existing APIs from OpenSSL, making interoperability easier for downstream applications. - Added a missing bounds check in c2i_ASN1_BIT_STRING. - Removed three remaining single DES cipher suites. - Fixed a potential leak/incorrect return value in DSA signature generation. - Added a blinding value when generating DSA and ECDSA signatures, in order to reduce the possibility of a side-channel attack leaking the private key. - Added ECC constant time scalar multiplication support. - Revised the implementation of RSASSA-PKCS1-v1_5 to match the specification in RFC 8017. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-950=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libcrypto43-2.8.0-lp150.2.3.1 libcrypto43-debuginfo-2.8.0-lp150.2.3.1 libressl-2.8.0-lp150.2.3.1 libressl-debuginfo-2.8.0-lp150.2.3.1 libressl-debugsource-2.8.0-lp150.2.3.1 libressl-devel-2.8.0-lp150.2.3.1 libssl45-2.8.0-lp150.2.3.1 libssl45-debuginfo-2.8.0-lp150.2.3.1 libtls17-2.8.0-lp150.2.3.1 libtls17-debuginfo-2.8.0-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): libressl-devel-doc-2.8.0-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libcrypto43-32bit-2.8.0-lp150.2.3.1 libcrypto43-32bit-debuginfo-2.8.0-lp150.2.3.1 libressl-devel-32bit-2.8.0-lp150.2.3.1 libssl45-32bit-2.8.0-lp150.2.3.1 libssl45-32bit-debuginfo-2.8.0-lp150.2.3.1 libtls17-32bit-2.8.0-lp150.2.3.1 libtls17-32bit-debuginfo-2.8.0-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-12434.html https://bugzilla.suse.com/1097779 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2591-1: moderate: Security update for zutils
by opensuse-security＠opensuse.org 03 Sep '18

03 Sep '18

openSUSE Security Update: Security update for zutils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2591-1 Rating: moderate References: #1103878 Cross-References: CVE-2018-1000637 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for zutils to version 1.7 fixes one security issue: - CVE-2018-1000637: buffer overrun in zcat utility (boo#1103878) Please note that the zutils zcat utility is distinct from the default gzip zcat utility. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-951=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-951=1 Package List: - openSUSE Leap 42.3 (x86_64): zutils-1.7-4.3.1 zutils-debuginfo-1.7-4.3.1 zutils-debugsource-1.7-4.3.1 - openSUSE Leap 15.0 (x86_64): zutils-1.7-lp150.2.3.1 zutils-debuginfo-1.7-lp150.2.3.1 zutils-debugsource-1.7-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-1000637.html https://bugzilla.suse.com/1103878 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2590-1: important: Security update for cobbler
by opensuse-security＠opensuse.org 03 Sep '18

03 Sep '18

openSUSE Security Update: Security update for cobbler ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2590-1 Rating: important References: #1097733 #1101670 #1104189 #1104190 #1104287 #1105440 #1105442 Cross-References: CVE-2018-1000225 CVE-2018-1000226 CVE-2018-10931 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves three vulnerabilities and has four fixes is now available. Description: This update for cobbler fixes the following issues: Security issues fixed: - Forbid exposure of private methods in the API (CVE-2018-10931, CVE-2018-1000225, bsc#1104287, bsc#1104189, bsc#1105442) - Check access token when calling 'modify_setting' API endpoint (bsc#1104190, bsc#1105440, CVE-2018-1000226) Other bugs fixed: - Do not try to hardlink to a symlink. The result will be a dangling symlink in the general case. (bsc#1097733) - fix kernel options when generating bootiso (bsc#1101670) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-952=1 Package List: - openSUSE Leap 42.3 (noarch): cobbler-2.6.6-17.1 cobbler-tests-2.6.6-17.1 cobbler-web-2.6.6-17.1 koan-2.6.6-17.1 References: https://www.suse.com/security/cve/CVE-2018-1000225.html https://www.suse.com/security/cve/CVE-2018-1000226.html https://www.suse.com/security/cve/CVE-2018-10931.html https://bugzilla.suse.com/1097733 https://bugzilla.suse.com/1101670 https://bugzilla.suse.com/1104189 https://bugzilla.suse.com/1104190 https://bugzilla.suse.com/1104287 https://bugzilla.suse.com/1105440 https://bugzilla.suse.com/1105442 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2587-1: moderate: Security update for wireshark
by opensuse-security＠opensuse.org 01 Sep '18

01 Sep '18

openSUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2587-1 Rating: moderate References: #1106514 Cross-References: CVE-2018-16056 CVE-2018-16057 CVE-2018-16058 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for wireshark to version 2.2.17 fixes the following issues: Security issues fixed (boo#1106514): - CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44) - CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45) - CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46) Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-2.2.17.html Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-949=1 Package List: - openSUSE Leap 42.3 (x86_64): wireshark-2.2.17-47.1 wireshark-debuginfo-2.2.17-47.1 wireshark-debugsource-2.2.17-47.1 wireshark-devel-2.2.17-47.1 wireshark-ui-gtk-2.2.17-47.1 wireshark-ui-gtk-debuginfo-2.2.17-47.1 wireshark-ui-qt-2.2.17-47.1 wireshark-ui-qt-debuginfo-2.2.17-47.1 References: https://www.suse.com/security/cve/CVE-2018-16056.html https://www.suse.com/security/cve/CVE-2018-16057.html https://www.suse.com/security/cve/CVE-2018-16058.html https://bugzilla.suse.com/1106514 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0