September 2018 - openSUSE Security Announce

[security-announce] openSUSE-SU-2018:2727-1: moderate: Security update for okular
by opensuse-security＠opensuse.org 15 Sep '18

15 Sep '18

openSUSE Security Update: Security update for okular ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2727-1 Rating: moderate References: #1107591 Cross-References: CVE-2018-1000801 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for okular fixes the following security issue: - CVE-2018-1000801: Prevent directory traversal vulnerability in function unpackDocumentArchive could have resulted in arbitrary file creation via a specially crafted Okular archive (bsc#1107591). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-1006=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): okular-17.04.2-11.1 okular-debuginfo-17.04.2-11.1 okular-debugsource-17.04.2-11.1 okular-devel-17.04.2-11.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): okular-lang-17.04.2-11.1 References: https://www.suse.com/security/cve/CVE-2018-1000801.html https://bugzilla.suse.com/1107591 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2724-1: moderate: Security update for chromium
by opensuse-security＠opensuse.org 15 Sep '18

15 Sep '18

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2724-1 Rating: moderate References: #1108114 #1108175 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for Chromium to version 69.0.3497.92 fixes the following issues: Security issues fixed ((boo#1108114): - Function signature mismatch in WebAssembly - URL Spoofing in Omnibox The following tracked packaging issues were fixed: - the chromium package incorrectly provied swiftshader resolvables (boo#1108175) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-1005=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-69.0.3497.92-68.1 chromedriver-debuginfo-69.0.3497.92-68.1 chromium-69.0.3497.92-68.1 chromium-debuginfo-69.0.3497.92-68.1 chromium-debugsource-69.0.3497.92-68.1 References: https://bugzilla.suse.com/1108114 https://bugzilla.suse.com/1108175 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2723-1: Security update for ffmpeg-4
by opensuse-security＠opensuse.org 15 Sep '18

15 Sep '18

openSUSE Security Update: Security update for ffmpeg-4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2723-1 Rating: low References: #1092241 #1100348 #1105869 Cross-References: CVE-2018-13300 CVE-2018-15822 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for ffmpeg-4 to version 4.0.2 fixes the following issues: These security issues were fixed: - CVE-2018-15822: The flv_write_packet function did not check for an empty audio packet, leading to an assertion failure and DoS (bsc#1105869). - CVE-2018-13300: An improper argument passed to the avpriv_request_sample function may have triggered an out-of-array read while converting a crafted AVI file to MPEG4, leading to a denial of service and possibly an information disclosure (bsc#1100348). These non-security issues were fixed: - Enable webvtt encoders and decoders (boo#1092241). - Build codec2 encoder and decoder, add libcodec2 to enable_decoders and enable_encoders. - Enable mpeg 1 and 2 encoders. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1004=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1004=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ffmpeg-4-debugsource-4.0.2-13.1 ffmpeg-4-libavcodec-devel-4.0.2-13.1 ffmpeg-4-libavdevice-devel-4.0.2-13.1 ffmpeg-4-libavfilter-devel-4.0.2-13.1 ffmpeg-4-libavformat-devel-4.0.2-13.1 ffmpeg-4-libavresample-devel-4.0.2-13.1 ffmpeg-4-libavutil-devel-4.0.2-13.1 ffmpeg-4-libpostproc-devel-4.0.2-13.1 ffmpeg-4-libswresample-devel-4.0.2-13.1 ffmpeg-4-libswscale-devel-4.0.2-13.1 ffmpeg-4-private-devel-4.0.2-13.1 libavcodec58-4.0.2-13.1 libavcodec58-debuginfo-4.0.2-13.1 libavdevice58-4.0.2-13.1 libavdevice58-debuginfo-4.0.2-13.1 libavfilter7-4.0.2-13.1 libavfilter7-debuginfo-4.0.2-13.1 libavformat58-4.0.2-13.1 libavformat58-debuginfo-4.0.2-13.1 libavresample4-4.0.2-13.1 libavresample4-debuginfo-4.0.2-13.1 libavutil56-4.0.2-13.1 libavutil56-debuginfo-4.0.2-13.1 libpostproc55-4.0.2-13.1 libpostproc55-debuginfo-4.0.2-13.1 libswresample3-4.0.2-13.1 libswresample3-debuginfo-4.0.2-13.1 libswscale5-4.0.2-13.1 libswscale5-debuginfo-4.0.2-13.1 - openSUSE Leap 42.3 (x86_64): libavcodec58-32bit-4.0.2-13.1 libavcodec58-debuginfo-32bit-4.0.2-13.1 libavdevice58-32bit-4.0.2-13.1 libavdevice58-debuginfo-32bit-4.0.2-13.1 libavfilter7-32bit-4.0.2-13.1 libavfilter7-debuginfo-32bit-4.0.2-13.1 libavformat58-32bit-4.0.2-13.1 libavformat58-debuginfo-32bit-4.0.2-13.1 libavresample4-32bit-4.0.2-13.1 libavresample4-debuginfo-32bit-4.0.2-13.1 libavutil56-32bit-4.0.2-13.1 libavutil56-debuginfo-32bit-4.0.2-13.1 libpostproc55-32bit-4.0.2-13.1 libpostproc55-debuginfo-32bit-4.0.2-13.1 libswresample3-32bit-4.0.2-13.1 libswresample3-debuginfo-32bit-4.0.2-13.1 libswscale5-32bit-4.0.2-13.1 libswscale5-debuginfo-32bit-4.0.2-13.1 - openSUSE Leap 15.0 (x86_64): ffmpeg-4-debugsource-4.0.2-lp150.13.1 ffmpeg-4-libavcodec-devel-4.0.2-lp150.13.1 ffmpeg-4-libavdevice-devel-4.0.2-lp150.13.1 ffmpeg-4-libavfilter-devel-4.0.2-lp150.13.1 ffmpeg-4-libavformat-devel-4.0.2-lp150.13.1 ffmpeg-4-libavresample-devel-4.0.2-lp150.13.1 ffmpeg-4-libavutil-devel-4.0.2-lp150.13.1 ffmpeg-4-libpostproc-devel-4.0.2-lp150.13.1 ffmpeg-4-libswresample-devel-4.0.2-lp150.13.1 ffmpeg-4-libswscale-devel-4.0.2-lp150.13.1 ffmpeg-4-private-devel-4.0.2-lp150.13.1 libavcodec58-4.0.2-lp150.13.1 libavcodec58-debuginfo-4.0.2-lp150.13.1 libavdevice58-4.0.2-lp150.13.1 libavdevice58-debuginfo-4.0.2-lp150.13.1 libavfilter7-4.0.2-lp150.13.1 libavfilter7-debuginfo-4.0.2-lp150.13.1 libavformat58-4.0.2-lp150.13.1 libavformat58-debuginfo-4.0.2-lp150.13.1 libavresample4-4.0.2-lp150.13.1 libavresample4-debuginfo-4.0.2-lp150.13.1 libavutil56-4.0.2-lp150.13.1 libavutil56-debuginfo-4.0.2-lp150.13.1 libpostproc55-4.0.2-lp150.13.1 libpostproc55-debuginfo-4.0.2-lp150.13.1 libswresample3-4.0.2-lp150.13.1 libswresample3-debuginfo-4.0.2-lp150.13.1 libswscale5-4.0.2-lp150.13.1 libswscale5-debuginfo-4.0.2-lp150.13.1 References: https://www.suse.com/security/cve/CVE-2018-13300.html https://www.suse.com/security/cve/CVE-2018-15822.html https://bugzilla.suse.com/1092241 https://bugzilla.suse.com/1100348 https://bugzilla.suse.com/1105869 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2712-1: moderate: Security update for python3
by opensuse-security＠opensuse.org 14 Sep '18

14 Sep '18

openSUSE Security Update: Security update for python3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2712-1 Rating: moderate References: #1086001 #1088004 #1088009 #1107030 Cross-References: CVE-2018-1060 CVE-2018-1061 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for python3 provides the following fixes: These security issues were fixed: - CVE-2018-1061: Prevent catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could have used this flaw to cause denial of service (bsc#1088004). - CVE-2018-1060: Prevent catastrophic backtracking in pop3lib's apop() method. An attacker could have used this flaw to cause denial of service (bsc#1088009). These non-security issues were fixed: - Sort files and directories when creating tarfile archives so that they are created in a more predictable way. (bsc#1086001) - Add -fwrapv to OPTS (bsc#1107030) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1001=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libpython3_4m1_0-3.4.6-12.6.1 libpython3_4m1_0-debuginfo-3.4.6-12.6.1 python3-3.4.6-12.6.1 python3-base-3.4.6-12.6.1 python3-base-debuginfo-3.4.6-12.6.1 python3-base-debugsource-3.4.6-12.6.1 python3-curses-3.4.6-12.6.1 python3-curses-debuginfo-3.4.6-12.6.1 python3-dbm-3.4.6-12.6.1 python3-dbm-debuginfo-3.4.6-12.6.1 python3-debuginfo-3.4.6-12.6.1 python3-debugsource-3.4.6-12.6.1 python3-devel-3.4.6-12.6.1 python3-devel-debuginfo-3.4.6-12.6.1 python3-idle-3.4.6-12.6.1 python3-testsuite-3.4.6-12.6.1 python3-testsuite-debuginfo-3.4.6-12.6.1 python3-tk-3.4.6-12.6.1 python3-tk-debuginfo-3.4.6-12.6.1 python3-tools-3.4.6-12.6.1 - openSUSE Leap 42.3 (x86_64): libpython3_4m1_0-32bit-3.4.6-12.6.1 libpython3_4m1_0-debuginfo-32bit-3.4.6-12.6.1 python3-32bit-3.4.6-12.6.1 python3-base-32bit-3.4.6-12.6.1 python3-base-debuginfo-32bit-3.4.6-12.6.1 python3-debuginfo-32bit-3.4.6-12.6.1 - openSUSE Leap 42.3 (noarch): python3-doc-3.4.6-12.6.1 python3-doc-pdf-3.4.6-12.6.1 References: https://www.suse.com/security/cve/CVE-2018-1060.html https://www.suse.com/security/cve/CVE-2018-1061.html https://bugzilla.suse.com/1086001 https://bugzilla.suse.com/1088004 https://bugzilla.suse.com/1088009 https://bugzilla.suse.com/1107030 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2695-1: moderate: Security update for compat-openssl098
by opensuse-security＠opensuse.org 12 Sep '18

12 Sep '18

openSUSE Security Update: Security update for compat-openssl098 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2695-1 Rating: moderate References: #1087102 #1089039 #1097158 #1097624 #1098592 Cross-References: CVE-2018-0732 CVE-2018-0737 CVE-2018-0739 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves three vulnerabilities and has two fixes is now available. Description: This update for compat-openssl098 fixes the following security issues: - CVE-2018-0732: During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server could have sent a very large prime value to the client. This caused the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack (bsc#1097158) - Blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592) - CVE-2018-0737: The RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could have recovered the private key (bsc#1089039) - CVE-2018-0739: Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could have resulted in DoS (bsc#1087102). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-997=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): compat-openssl098-debugsource-0.9.8j-24.1 libopenssl0_9_8-0.9.8j-24.1 libopenssl0_9_8-debuginfo-0.9.8j-24.1 - openSUSE Leap 42.3 (x86_64): libopenssl0_9_8-32bit-0.9.8j-24.1 libopenssl0_9_8-debuginfo-32bit-0.9.8j-24.1 References: https://www.suse.com/security/cve/CVE-2018-0732.html https://www.suse.com/security/cve/CVE-2018-0737.html https://www.suse.com/security/cve/CVE-2018-0739.html https://bugzilla.suse.com/1087102 https://bugzilla.suse.com/1089039 https://bugzilla.suse.com/1097158 https://bugzilla.suse.com/1097624 https://bugzilla.suse.com/1098592 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2694-1: moderate: Security update for php5
by opensuse-security＠opensuse.org 12 Sep '18

12 Sep '18

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2694-1 Rating: moderate References: #1096984 #1099098 #1103659 #1105466 Cross-References: CVE-2017-9118 CVE-2018-10360 CVE-2018-12882 CVE-2018-14851 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for php5 fixes the following issues: The following security issues were fixed: - CVE-2018-10360: Fixed an out-of-bounds read in the do_core_note function in readelf.c in libmagic.a, which allowed remote attackers to cause a denial of service via a crafted ELF file (bsc#1096984) - CVE-2018-14851: Fixed an out-of-bound read in exif_process_IFD_in_MAKERNOTE, which could be exploited by an attacker via crafted JPG files, and could result in an application crash. (bsc#1103659) - CVE-2018-12882: Fixed an use-after-free in exif_read_from_impl in ext/exif/exif.c (bsc#1099098) - CVE-2017-9118: Fixed an out of bounds access in php_pcre_replace_impl via a crafted preg_replace call (bsc#1105466) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-998=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-mod_php5-5.5.14-103.1 apache2-mod_php5-debuginfo-5.5.14-103.1 php5-5.5.14-103.1 php5-bcmath-5.5.14-103.1 php5-bcmath-debuginfo-5.5.14-103.1 php5-bz2-5.5.14-103.1 php5-bz2-debuginfo-5.5.14-103.1 php5-calendar-5.5.14-103.1 php5-calendar-debuginfo-5.5.14-103.1 php5-ctype-5.5.14-103.1 php5-ctype-debuginfo-5.5.14-103.1 php5-curl-5.5.14-103.1 php5-curl-debuginfo-5.5.14-103.1 php5-dba-5.5.14-103.1 php5-dba-debuginfo-5.5.14-103.1 php5-debuginfo-5.5.14-103.1 php5-debugsource-5.5.14-103.1 php5-devel-5.5.14-103.1 php5-dom-5.5.14-103.1 php5-dom-debuginfo-5.5.14-103.1 php5-enchant-5.5.14-103.1 php5-enchant-debuginfo-5.5.14-103.1 php5-exif-5.5.14-103.1 php5-exif-debuginfo-5.5.14-103.1 php5-fastcgi-5.5.14-103.1 php5-fastcgi-debuginfo-5.5.14-103.1 php5-fileinfo-5.5.14-103.1 php5-fileinfo-debuginfo-5.5.14-103.1 php5-firebird-5.5.14-103.1 php5-firebird-debuginfo-5.5.14-103.1 php5-fpm-5.5.14-103.1 php5-fpm-debuginfo-5.5.14-103.1 php5-ftp-5.5.14-103.1 php5-ftp-debuginfo-5.5.14-103.1 php5-gd-5.5.14-103.1 php5-gd-debuginfo-5.5.14-103.1 php5-gettext-5.5.14-103.1 php5-gettext-debuginfo-5.5.14-103.1 php5-gmp-5.5.14-103.1 php5-gmp-debuginfo-5.5.14-103.1 php5-iconv-5.5.14-103.1 php5-iconv-debuginfo-5.5.14-103.1 php5-imap-5.5.14-103.1 php5-imap-debuginfo-5.5.14-103.1 php5-intl-5.5.14-103.1 php5-intl-debuginfo-5.5.14-103.1 php5-json-5.5.14-103.1 php5-json-debuginfo-5.5.14-103.1 php5-ldap-5.5.14-103.1 php5-ldap-debuginfo-5.5.14-103.1 php5-mbstring-5.5.14-103.1 php5-mbstring-debuginfo-5.5.14-103.1 php5-mcrypt-5.5.14-103.1 php5-mcrypt-debuginfo-5.5.14-103.1 php5-mssql-5.5.14-103.1 php5-mssql-debuginfo-5.5.14-103.1 php5-mysql-5.5.14-103.1 php5-mysql-debuginfo-5.5.14-103.1 php5-odbc-5.5.14-103.1 php5-odbc-debuginfo-5.5.14-103.1 php5-opcache-5.5.14-103.1 php5-opcache-debuginfo-5.5.14-103.1 php5-openssl-5.5.14-103.1 php5-openssl-debuginfo-5.5.14-103.1 php5-pcntl-5.5.14-103.1 php5-pcntl-debuginfo-5.5.14-103.1 php5-pdo-5.5.14-103.1 php5-pdo-debuginfo-5.5.14-103.1 php5-pgsql-5.5.14-103.1 php5-pgsql-debuginfo-5.5.14-103.1 php5-phar-5.5.14-103.1 php5-phar-debuginfo-5.5.14-103.1 php5-posix-5.5.14-103.1 php5-posix-debuginfo-5.5.14-103.1 php5-pspell-5.5.14-103.1 php5-pspell-debuginfo-5.5.14-103.1 php5-readline-5.5.14-103.1 php5-readline-debuginfo-5.5.14-103.1 php5-shmop-5.5.14-103.1 php5-shmop-debuginfo-5.5.14-103.1 php5-snmp-5.5.14-103.1 php5-snmp-debuginfo-5.5.14-103.1 php5-soap-5.5.14-103.1 php5-soap-debuginfo-5.5.14-103.1 php5-sockets-5.5.14-103.1 php5-sockets-debuginfo-5.5.14-103.1 php5-sqlite-5.5.14-103.1 php5-sqlite-debuginfo-5.5.14-103.1 php5-suhosin-5.5.14-103.1 php5-suhosin-debuginfo-5.5.14-103.1 php5-sysvmsg-5.5.14-103.1 php5-sysvmsg-debuginfo-5.5.14-103.1 php5-sysvsem-5.5.14-103.1 php5-sysvsem-debuginfo-5.5.14-103.1 php5-sysvshm-5.5.14-103.1 php5-sysvshm-debuginfo-5.5.14-103.1 php5-tidy-5.5.14-103.1 php5-tidy-debuginfo-5.5.14-103.1 php5-tokenizer-5.5.14-103.1 php5-tokenizer-debuginfo-5.5.14-103.1 php5-wddx-5.5.14-103.1 php5-wddx-debuginfo-5.5.14-103.1 php5-xmlreader-5.5.14-103.1 php5-xmlreader-debuginfo-5.5.14-103.1 php5-xmlrpc-5.5.14-103.1 php5-xmlrpc-debuginfo-5.5.14-103.1 php5-xmlwriter-5.5.14-103.1 php5-xmlwriter-debuginfo-5.5.14-103.1 php5-xsl-5.5.14-103.1 php5-xsl-debuginfo-5.5.14-103.1 php5-zip-5.5.14-103.1 php5-zip-debuginfo-5.5.14-103.1 php5-zlib-5.5.14-103.1 php5-zlib-debuginfo-5.5.14-103.1 - openSUSE Leap 42.3 (noarch): php5-pear-5.5.14-103.1 References: https://www.suse.com/security/cve/CVE-2017-9118.html https://www.suse.com/security/cve/CVE-2018-10360.html https://www.suse.com/security/cve/CVE-2018-12882.html https://www.suse.com/security/cve/CVE-2018-14851.html https://bugzilla.suse.com/1096984 https://bugzilla.suse.com/1099098 https://bugzilla.suse.com/1103659 https://bugzilla.suse.com/1105466 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2693-1: moderate: Security update for qemu
by opensuse-security＠opensuse.org 12 Sep '18

12 Sep '18

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2693-1 Rating: moderate References: #1094898 #1098735 #1102604 #1103628 #1105279 Cross-References: CVE-2018-12617 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has four fixes is now available. Description: This update for qemu fixes the following issues: This security issue was fixed: - CVE-2018-12617: qmp_guest_file_read had an integer overflow that could have been exploited by sending a crafted QMP command (including guest-file-read with a large count value) to the agent via the listening socket causing DoS (bsc#1098735) These non-security issues were fixed: - Allow kvm group access to /dev/sev (bsc#1102604). - Fix for the value used for reduced_phys_bits. Please update the reduced_phys_bits value used on the commandline or in libvirt XML to the value 1 (explicitly set now in QEMU code). (bsc#1103628) - Fix (again) the qemu guest agent udev rule file, which got unfixed in a series of unfortunate events (bsc#1094898 and now bsc#1105279) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-996=1 Package List: - openSUSE Leap 15.0 (noarch): qemu-ipxe-1.0.0-lp150.7.9.1 qemu-seabios-1.11.0-lp150.7.9.1 qemu-sgabios-8-lp150.7.9.1 qemu-vgabios-1.11.0-lp150.7.9.1 - openSUSE Leap 15.0 (x86_64): qemu-2.11.2-lp150.7.9.1 qemu-arm-2.11.2-lp150.7.9.1 qemu-arm-debuginfo-2.11.2-lp150.7.9.1 qemu-block-curl-2.11.2-lp150.7.9.1 qemu-block-curl-debuginfo-2.11.2-lp150.7.9.1 qemu-block-dmg-2.11.2-lp150.7.9.1 qemu-block-dmg-debuginfo-2.11.2-lp150.7.9.1 qemu-block-gluster-2.11.2-lp150.7.9.1 qemu-block-gluster-debuginfo-2.11.2-lp150.7.9.1 qemu-block-iscsi-2.11.2-lp150.7.9.1 qemu-block-iscsi-debuginfo-2.11.2-lp150.7.9.1 qemu-block-rbd-2.11.2-lp150.7.9.1 qemu-block-rbd-debuginfo-2.11.2-lp150.7.9.1 qemu-block-ssh-2.11.2-lp150.7.9.1 qemu-block-ssh-debuginfo-2.11.2-lp150.7.9.1 qemu-debuginfo-2.11.2-lp150.7.9.1 qemu-debugsource-2.11.2-lp150.7.9.1 qemu-extra-2.11.2-lp150.7.9.1 qemu-extra-debuginfo-2.11.2-lp150.7.9.1 qemu-guest-agent-2.11.2-lp150.7.9.1 qemu-guest-agent-debuginfo-2.11.2-lp150.7.9.1 qemu-ksm-2.11.2-lp150.7.9.1 qemu-kvm-2.11.2-lp150.7.9.1 qemu-lang-2.11.2-lp150.7.9.1 qemu-linux-user-2.11.2-lp150.7.9.1 qemu-linux-user-debuginfo-2.11.2-lp150.7.9.1 qemu-linux-user-debugsource-2.11.2-lp150.7.9.1 qemu-ppc-2.11.2-lp150.7.9.1 qemu-ppc-debuginfo-2.11.2-lp150.7.9.1 qemu-s390-2.11.2-lp150.7.9.1 qemu-s390-debuginfo-2.11.2-lp150.7.9.1 qemu-testsuite-2.11.2-lp150.7.9.1 qemu-tools-2.11.2-lp150.7.9.1 qemu-tools-debuginfo-2.11.2-lp150.7.9.1 qemu-x86-2.11.2-lp150.7.9.1 qemu-x86-debuginfo-2.11.2-lp150.7.9.1 References: https://www.suse.com/security/cve/CVE-2018-12617.html https://bugzilla.suse.com/1094898 https://bugzilla.suse.com/1098735 https://bugzilla.suse.com/1102604 https://bugzilla.suse.com/1103628 https://bugzilla.suse.com/1105279 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2674-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 08 Sep '18

08 Sep '18

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2674-1 Rating: important References: #1066489 #1107343 Cross-References: CVE-2017-16541 CVE-2018-12376 CVE-2018-12377 CVE-2018-12378 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update to Mozilla Firefox 60.2.0esr fixes the following issues: Security issues fixed (MFSA 2018-21, boo#1107343): - CVE-2018-12377: Use-after-free in refresh driver timers - CVE-2018-12378: Use-after-free in IndexedDB - CVE-2017-16541: Proxy bypass using automount and autofs (boo#1066489) - CVE-2018-12376: Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-995=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-995=1 Package List: - openSUSE Leap 42.3 (x86_64): MozillaFirefox-60.2.0-109.1 MozillaFirefox-branding-upstream-60.2.0-109.1 MozillaFirefox-buildsymbols-60.2.0-109.1 MozillaFirefox-debuginfo-60.2.0-109.1 MozillaFirefox-debugsource-60.2.0-109.1 MozillaFirefox-devel-60.2.0-109.1 MozillaFirefox-translations-common-60.2.0-109.1 MozillaFirefox-translations-other-60.2.0-109.1 - openSUSE Leap 15.0 (x86_64): MozillaFirefox-60.2.0-lp150.3.14.1 MozillaFirefox-branding-upstream-60.2.0-lp150.3.14.1 MozillaFirefox-buildsymbols-60.2.0-lp150.3.14.1 MozillaFirefox-debuginfo-60.2.0-lp150.3.14.1 MozillaFirefox-debugsource-60.2.0-lp150.3.14.1 MozillaFirefox-devel-60.2.0-lp150.3.14.1 MozillaFirefox-translations-common-60.2.0-lp150.3.14.1 MozillaFirefox-translations-other-60.2.0-lp150.3.14.1 References: https://www.suse.com/security/cve/CVE-2017-16541.html https://www.suse.com/security/cve/CVE-2018-12376.html https://www.suse.com/security/cve/CVE-2018-12377.html https://www.suse.com/security/cve/CVE-2018-12378.html https://bugzilla.suse.com/1066489 https://bugzilla.suse.com/1107343 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2672-1: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 08 Sep '18

08 Sep '18

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2672-1 Rating: low References: #1106855 Cross-References: CVE-2018-16323 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for GraphicsMagick fixes the following security issue: - CVE-2018-16323: ReadXBMImage left data uninitialized when processing an XBM file that has a negative pixel value. If the affected code was used as a library loaded into a process that includes sensitive information, that information sometimes can be leaked via the image data (bsc#1106855). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-993=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): GraphicsMagick-1.3.25-102.1 GraphicsMagick-debuginfo-1.3.25-102.1 GraphicsMagick-debugsource-1.3.25-102.1 GraphicsMagick-devel-1.3.25-102.1 libGraphicsMagick++-Q16-12-1.3.25-102.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.25-102.1 libGraphicsMagick++-devel-1.3.25-102.1 libGraphicsMagick-Q16-3-1.3.25-102.1 libGraphicsMagick-Q16-3-debuginfo-1.3.25-102.1 libGraphicsMagick3-config-1.3.25-102.1 libGraphicsMagickWand-Q16-2-1.3.25-102.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.25-102.1 perl-GraphicsMagick-1.3.25-102.1 perl-GraphicsMagick-debuginfo-1.3.25-102.1 References: https://www.suse.com/security/cve/CVE-2018-16323.html https://bugzilla.suse.com/1106855 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:2667-1: moderate: Security update for nodejs4
by opensuse-security＠opensuse.org 08 Sep '18

08 Sep '18

openSUSE Security Update: Security update for nodejs4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2667-1 Rating: moderate References: #1082318 #1091764 #1097158 #1097748 #1105019 Cross-References: CVE-2018-0732 CVE-2018-12115 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has three fixes is now available. Description: This update for nodejs4 fixes the following issues: Security issues fixed: - CVE-2018-12115: Fixed an out-of-bounds memory write in Buffer that could be used to write to memory outside of a Buffer's memory space buffer (bsc#1105019) - Upgrade to OpenSSL 1.0.2p, which fixed: - CVE-2018-0732: Client denial-of-service due to large DH parameter (bsc#1097158) - ECDSA key extraction via local side-channel Other changes made: - Recommend same major version npm package (bsc#1097748) - Use absolute paths in executable shebang lines - Fix building with ICU61.1 (bsc#1091764) - Install license with %license, not %doc (bsc#1082318) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-991=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): nodejs4-4.9.1-17.1 nodejs4-debuginfo-4.9.1-17.1 nodejs4-debugsource-4.9.1-17.1 nodejs4-devel-4.9.1-17.1 npm4-4.9.1-17.1 - openSUSE Leap 42.3 (noarch): nodejs4-docs-4.9.1-17.1 References: https://www.suse.com/security/cve/CVE-2018-0732.html https://www.suse.com/security/cve/CVE-2018-12115.html https://bugzilla.suse.com/1082318 https://bugzilla.suse.com/1091764 https://bugzilla.suse.com/1097158 https://bugzilla.suse.com/1097748 https://bugzilla.suse.com/1105019 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0