October 2019 - openSUSE Security Announce

[security-announce] openSUSE-SU-2019:2348-1: important: Security update for tcpdump
by opensuse-security＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Security Update: Security update for tcpdump ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2348-1 Rating: important References: #1068716 #1153098 #1153332 Cross-References: CVE-2017-16808 CVE-2018-10103 CVE-2018-10105 CVE-2018-14461 CVE-2018-14462 CVE-2018-14463 CVE-2018-14464 CVE-2018-14465 CVE-2018-14466 CVE-2018-14467 CVE-2018-14468 CVE-2018-14469 CVE-2018-14470 CVE-2018-14879 CVE-2018-14880 CVE-2018-14881 CVE-2018-14882 CVE-2018-16227 CVE-2018-16228 CVE-2018-16229 CVE-2018-16230 CVE-2018-16300 CVE-2018-16301 CVE-2018-16451 CVE-2018-16452 CVE-2019-1010220 CVE-2019-15166 CVE-2019-15167 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 28 vulnerabilities is now available. Description: This update for tcpdump fixes the following issues: - CVE-2017-16808: Fixed a heap-based buffer over-read related to aoe_print and lookup_emem (bsc#1068716 bsc#1153098). - CVE-2018-10103: Fixed a mishandling of the printing of SMB data (bsc#1153098). - CVE-2018-10105: Fixed a mishandling of the printing of SMB data (bsc#1153098). - CVE-2018-14461: Fixed a buffer over-read in print-ldp.c:ldp_tlv_print (bsc#1153098). - CVE-2018-14462: Fixed a buffer over-read in print-icmp.c:icmp_print (bsc#1153098). - CVE-2018-14463: Fixed a buffer over-read in print-vrrp.c:vrrp_print (bsc#1153098). - CVE-2018-14464: Fixed a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs (bsc#1153098). - CVE-2018-14465: Fixed a buffer over-read in print-rsvp.c:rsvp_obj_print (bsc#1153098). - CVE-2018-14466: Fixed a buffer over-read in print-rx.c:rx_cache_find (bsc#1153098). - CVE-2018-14467: Fixed a buffer over-read in print-bgp.c:bgp_capabilities_print (bsc#1153098). - CVE-2018-14468: Fixed a buffer over-read in print-fr.c:mfr_print (bsc#1153098). - CVE-2018-14469: Fixed a buffer over-read in print-isakmp.c:ikev1_n_print (bsc#1153098). - CVE-2018-14470: Fixed a buffer over-read in print-babel.c:babel_print_v2 (bsc#1153098). - CVE-2018-14879: Fixed a buffer overflow in the command-line argument parser (bsc#1153098). - CVE-2018-14880: Fixed a buffer over-read in the OSPFv3 parser (bsc#1153098). - CVE-2018-14881: Fixed a buffer over-read in the BGP parser (bsc#1153098). - CVE-2018-14882: Fixed a buffer over-read in the ICMPv6 parser (bsc#1153098). - CVE-2018-16227: Fixed a buffer over-read in the IEEE 802.11 parser in print-802_11.c for the Mesh Flags subfield (bsc#1153098). - CVE-2018-16228: Fixed a buffer over-read in the HNCP parser (bsc#1153098). - CVE-2018-16229: Fixed a buffer over-read in the DCCP parser (bsc#1153098). - CVE-2018-16230: Fixed a buffer over-read in the BGP parser in print-bgp.c:bgp_attr_print (bsc#1153098). - CVE-2018-16300: Fixed an unlimited recursion in the BGP parser that allowed denial-of-service by stack consumption (bsc#1153098). - CVE-2018-16301: Fixed a buffer overflow (bsc#1153332 bsc#1153098). - CVE-2018-16451: Fixed several buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN (bsc#1153098). - CVE-2018-16452: Fixed a stack exhaustion in smbutil.c:smb_fdata (bsc#1153098). - CVE-2019-15166: Fixed a bounds check in lmp_print_data_link_subobjs (bsc#1153098). - CVE-2019-15167: Fixed a vulnerability in VRRP (bsc#1153098). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2348=1 Package List: - openSUSE Leap 15.1 (x86_64): tcpdump-4.9.2-lp151.4.6.1 tcpdump-debuginfo-4.9.2-lp151.4.6.1 tcpdump-debugsource-4.9.2-lp151.4.6.1 References: https://www.suse.com/security/cve/CVE-2017-16808.html https://www.suse.com/security/cve/CVE-2018-10103.html https://www.suse.com/security/cve/CVE-2018-10105.html https://www.suse.com/security/cve/CVE-2018-14461.html https://www.suse.com/security/cve/CVE-2018-14462.html https://www.suse.com/security/cve/CVE-2018-14463.html https://www.suse.com/security/cve/CVE-2018-14464.html https://www.suse.com/security/cve/CVE-2018-14465.html https://www.suse.com/security/cve/CVE-2018-14466.html https://www.suse.com/security/cve/CVE-2018-14467.html https://www.suse.com/security/cve/CVE-2018-14468.html https://www.suse.com/security/cve/CVE-2018-14469.html https://www.suse.com/security/cve/CVE-2018-14470.html https://www.suse.com/security/cve/CVE-2018-14879.html https://www.suse.com/security/cve/CVE-2018-14880.html https://www.suse.com/security/cve/CVE-2018-14881.html https://www.suse.com/security/cve/CVE-2018-14882.html https://www.suse.com/security/cve/CVE-2018-16227.html https://www.suse.com/security/cve/CVE-2018-16228.html https://www.suse.com/security/cve/CVE-2018-16229.html https://www.suse.com/security/cve/CVE-2018-16230.html https://www.suse.com/security/cve/CVE-2018-16300.html https://www.suse.com/security/cve/CVE-2018-16301.html https://www.suse.com/security/cve/CVE-2018-16451.html https://www.suse.com/security/cve/CVE-2018-16452.html https://www.suse.com/security/cve/CVE-2019-1010220.html https://www.suse.com/security/cve/CVE-2019-15166.html https://www.suse.com/security/cve/CVE-2019-15167.html https://bugzilla.suse.com/1068716 https://bugzilla.suse.com/1153098 https://bugzilla.suse.com/1153332 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2343-1: important: Security update for libpcap
by opensuse-security＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Security Update: Security update for libpcap ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2343-1 Rating: important References: #1153332 Cross-References: CVE-2018-16301 CVE-2019-15165 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libpcap fixes the following issues: - CVE-2019-15165: Added sanity checks for PHB header length before allocating memory (bsc#1153332). - CVE-2018-16301: Fixed a buffer overflow (bsc#1153332). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2343=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libpcap-debugsource-1.8.1-lp150.3.3.1 libpcap-devel-1.8.1-lp150.3.3.1 libpcap-devel-static-1.8.1-lp150.3.3.1 libpcap1-1.8.1-lp150.3.3.1 libpcap1-debuginfo-1.8.1-lp150.3.3.1 - openSUSE Leap 15.0 (x86_64): libpcap-devel-32bit-1.8.1-lp150.3.3.1 libpcap1-32bit-1.8.1-lp150.3.3.1 libpcap1-32bit-debuginfo-1.8.1-lp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-16301.html https://www.suse.com/security/cve/CVE-2019-15165.html https://bugzilla.suse.com/1153332 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2345-1: important: Security update for libpcap
by opensuse-security＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Security Update: Security update for libpcap ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2345-1 Rating: important References: #1153332 Cross-References: CVE-2018-16301 CVE-2019-15165 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libpcap fixes the following issues: - CVE-2019-15165: Added sanity checks for PHB header length before allocating memory (bsc#1153332). - CVE-2018-16301: Fixed a buffer overflow (bsc#1153332). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2345=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpcap-debugsource-1.8.1-lp151.4.3.1 libpcap-devel-1.8.1-lp151.4.3.1 libpcap-devel-static-1.8.1-lp151.4.3.1 libpcap1-1.8.1-lp151.4.3.1 libpcap1-debuginfo-1.8.1-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): libpcap-devel-32bit-1.8.1-lp151.4.3.1 libpcap1-32bit-1.8.1-lp151.4.3.1 libpcap1-32bit-debuginfo-1.8.1-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2018-16301.html https://www.suse.com/security/cve/CVE-2019-15165.html https://bugzilla.suse.com/1153332 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2344-1: important: Security update for tcpdump
by opensuse-security＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Security Update: Security update for tcpdump ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2344-1 Rating: important References: #1068716 #1153098 #1153332 Cross-References: CVE-2017-16808 CVE-2018-10103 CVE-2018-10105 CVE-2018-14461 CVE-2018-14462 CVE-2018-14463 CVE-2018-14464 CVE-2018-14465 CVE-2018-14466 CVE-2018-14467 CVE-2018-14468 CVE-2018-14469 CVE-2018-14470 CVE-2018-14879 CVE-2018-14880 CVE-2018-14881 CVE-2018-14882 CVE-2018-16227 CVE-2018-16228 CVE-2018-16229 CVE-2018-16230 CVE-2018-16300 CVE-2018-16301 CVE-2018-16451 CVE-2018-16452 CVE-2019-1010220 CVE-2019-15166 CVE-2019-15167 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 28 vulnerabilities is now available. Description: This update for tcpdump fixes the following issues: - CVE-2017-16808: Fixed a heap-based buffer over-read related to aoe_print and lookup_emem (bsc#1068716 bsc#1153098). - CVE-2018-10103: Fixed a mishandling of the printing of SMB data (bsc#1153098). - CVE-2018-10105: Fixed a mishandling of the printing of SMB data (bsc#1153098). - CVE-2018-14461: Fixed a buffer over-read in print-ldp.c:ldp_tlv_print (bsc#1153098). - CVE-2018-14462: Fixed a buffer over-read in print-icmp.c:icmp_print (bsc#1153098). - CVE-2018-14463: Fixed a buffer over-read in print-vrrp.c:vrrp_print (bsc#1153098). - CVE-2018-14464: Fixed a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs (bsc#1153098). - CVE-2018-14465: Fixed a buffer over-read in print-rsvp.c:rsvp_obj_print (bsc#1153098). - CVE-2018-14466: Fixed a buffer over-read in print-rx.c:rx_cache_find (bsc#1153098). - CVE-2018-14467: Fixed a buffer over-read in print-bgp.c:bgp_capabilities_print (bsc#1153098). - CVE-2018-14468: Fixed a buffer over-read in print-fr.c:mfr_print (bsc#1153098). - CVE-2018-14469: Fixed a buffer over-read in print-isakmp.c:ikev1_n_print (bsc#1153098). - CVE-2018-14470: Fixed a buffer over-read in print-babel.c:babel_print_v2 (bsc#1153098). - CVE-2018-14879: Fixed a buffer overflow in the command-line argument parser (bsc#1153098). - CVE-2018-14880: Fixed a buffer over-read in the OSPFv3 parser (bsc#1153098). - CVE-2018-14881: Fixed a buffer over-read in the BGP parser (bsc#1153098). - CVE-2018-14882: Fixed a buffer over-read in the ICMPv6 parser (bsc#1153098). - CVE-2018-16227: Fixed a buffer over-read in the IEEE 802.11 parser in print-802_11.c for the Mesh Flags subfield (bsc#1153098). - CVE-2018-16228: Fixed a buffer over-read in the HNCP parser (bsc#1153098). - CVE-2018-16229: Fixed a buffer over-read in the DCCP parser (bsc#1153098). - CVE-2018-16230: Fixed a buffer over-read in the BGP parser in print-bgp.c:bgp_attr_print (bsc#1153098). - CVE-2018-16300: Fixed an unlimited recursion in the BGP parser that allowed denial-of-service by stack consumption (bsc#1153098). - CVE-2018-16301: Fixed a buffer overflow (bsc#1153332 bsc#1153098). - CVE-2018-16451: Fixed several buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN (bsc#1153098). - CVE-2018-16452: Fixed a stack exhaustion in smbutil.c:smb_fdata (bsc#1153098). - CVE-2019-15166: Fixed a bounds check in lmp_print_data_link_subobjs (bsc#1153098). - CVE-2019-15167: Fixed a vulnerability in VRRP (bsc#1153098). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2344=1 Package List: - openSUSE Leap 15.0 (x86_64): tcpdump-4.9.2-lp150.10.1 tcpdump-debuginfo-4.9.2-lp150.10.1 tcpdump-debugsource-4.9.2-lp150.10.1 References: https://www.suse.com/security/cve/CVE-2017-16808.html https://www.suse.com/security/cve/CVE-2018-10103.html https://www.suse.com/security/cve/CVE-2018-10105.html https://www.suse.com/security/cve/CVE-2018-14461.html https://www.suse.com/security/cve/CVE-2018-14462.html https://www.suse.com/security/cve/CVE-2018-14463.html https://www.suse.com/security/cve/CVE-2018-14464.html https://www.suse.com/security/cve/CVE-2018-14465.html https://www.suse.com/security/cve/CVE-2018-14466.html https://www.suse.com/security/cve/CVE-2018-14467.html https://www.suse.com/security/cve/CVE-2018-14468.html https://www.suse.com/security/cve/CVE-2018-14469.html https://www.suse.com/security/cve/CVE-2018-14470.html https://www.suse.com/security/cve/CVE-2018-14879.html https://www.suse.com/security/cve/CVE-2018-14880.html https://www.suse.com/security/cve/CVE-2018-14881.html https://www.suse.com/security/cve/CVE-2018-14882.html https://www.suse.com/security/cve/CVE-2018-16227.html https://www.suse.com/security/cve/CVE-2018-16228.html https://www.suse.com/security/cve/CVE-2018-16229.html https://www.suse.com/security/cve/CVE-2018-16230.html https://www.suse.com/security/cve/CVE-2018-16300.html https://www.suse.com/security/cve/CVE-2018-16301.html https://www.suse.com/security/cve/CVE-2018-16451.html https://www.suse.com/security/cve/CVE-2018-16452.html https://www.suse.com/security/cve/CVE-2019-1010220.html https://www.suse.com/security/cve/CVE-2019-15166.html https://www.suse.com/security/cve/CVE-2019-15167.html https://bugzilla.suse.com/1068716 https://bugzilla.suse.com/1153098 https://bugzilla.suse.com/1153332 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2340-1: moderate: Security update for dhcp
by opensuse-security＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Security Update: Security update for dhcp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2340-1 Rating: moderate References: #1089524 #1134078 #1136572 Cross-References: CVE-2019-6470 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for dhcp fixes the following issues: Secuirty issue fixed: - CVE-2019-6470: Fixed DHCPv6 server crashes (bsc#1134078). Bug fixes: - Add compile option --enable-secs-byteorder to avoid duplicate lease warnings (bsc#1089524). - Use IPv6 when called as dhclient6, dhcpd6, and dhcrelay6 (bsc#1136572). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2340=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): dhcp-4.3.5-lp150.5.3.1 dhcp-client-4.3.5-lp150.5.3.1 dhcp-client-debuginfo-4.3.5-lp150.5.3.1 dhcp-debuginfo-4.3.5-lp150.5.3.1 dhcp-debugsource-4.3.5-lp150.5.3.1 dhcp-devel-4.3.5-lp150.5.3.1 dhcp-doc-4.3.5-lp150.5.3.1 dhcp-relay-4.3.5-lp150.5.3.1 dhcp-relay-debuginfo-4.3.5-lp150.5.3.1 dhcp-server-4.3.5-lp150.5.3.1 dhcp-server-debuginfo-4.3.5-lp150.5.3.1 References: https://www.suse.com/security/cve/CVE-2019-6470.html https://bugzilla.suse.com/1089524 https://bugzilla.suse.com/1134078 https://bugzilla.suse.com/1136572 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2341-1: moderate: Security update for dhcp
by opensuse-security＠opensuse.org 20 Oct '19

20 Oct '19

openSUSE Security Update: Security update for dhcp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2341-1 Rating: moderate References: #1089524 #1134078 #1136572 Cross-References: CVE-2019-6470 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for dhcp fixes the following issues: Secuirty issue fixed: - CVE-2019-6470: Fixed DHCPv6 server crashes (bsc#1134078). Bug fixes: - Add compile option --enable-secs-byteorder to avoid duplicate lease warnings (bsc#1089524). - Use IPv6 when called as dhclient6, dhcpd6, and dhcrelay6 (bsc#1136572). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2341=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): dhcp-4.3.5-lp151.6.3.1 dhcp-client-4.3.5-lp151.6.3.1 dhcp-client-debuginfo-4.3.5-lp151.6.3.1 dhcp-debuginfo-4.3.5-lp151.6.3.1 dhcp-debugsource-4.3.5-lp151.6.3.1 dhcp-devel-4.3.5-lp151.6.3.1 dhcp-doc-4.3.5-lp151.6.3.1 dhcp-relay-4.3.5-lp151.6.3.1 dhcp-relay-debuginfo-4.3.5-lp151.6.3.1 dhcp-server-4.3.5-lp151.6.3.1 dhcp-server-debuginfo-4.3.5-lp151.6.3.1 References: https://www.suse.com/security/cve/CVE-2019-6470.html https://bugzilla.suse.com/1089524 https://bugzilla.suse.com/1134078 https://bugzilla.suse.com/1136572 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2333-1: important: Security update for sudo
by opensuse-security＠opensuse.org 17 Oct '19

17 Oct '19

openSUSE Security Update: Security update for sudo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2333-1 Rating: important References: #1153674 Cross-References: CVE-2019-14287 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sudo fixes the following issue: - CVE-2019-14287: Fixed an issue where a user with sudo privileges that allowed them to run commands with an arbitrary uid, could run commands as root, despite being forbidden to do so in sudoers (bsc#1153674). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2333=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): sudo-1.8.22-lp150.8.1 sudo-debuginfo-1.8.22-lp150.8.1 sudo-debugsource-1.8.22-lp150.8.1 sudo-devel-1.8.22-lp150.8.1 sudo-test-1.8.22-lp150.8.1 References: https://www.suse.com/security/cve/CVE-2019-14287.html https://bugzilla.suse.com/1153674 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2321-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2321-1 Rating: moderate References: #1151782 Cross-References: CVE-2019-16709 Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for GraphicsMagick fixes the following issues: - CVE-2019-16709: Fixed a memory leak in coders/dps.c (boo#1151782). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2321=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2321=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): GraphicsMagick-1.3.29-bp151.5.6.1 GraphicsMagick-debuginfo-1.3.29-bp151.5.6.1 GraphicsMagick-debugsource-1.3.29-bp151.5.6.1 GraphicsMagick-devel-1.3.29-bp151.5.6.1 libGraphicsMagick++-Q16-12-1.3.29-bp151.5.6.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.29-bp151.5.6.1 libGraphicsMagick++-devel-1.3.29-bp151.5.6.1 libGraphicsMagick-Q16-3-1.3.29-bp151.5.6.1 libGraphicsMagick-Q16-3-debuginfo-1.3.29-bp151.5.6.1 libGraphicsMagick3-config-1.3.29-bp151.5.6.1 libGraphicsMagickWand-Q16-2-1.3.29-bp151.5.6.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.29-bp151.5.6.1 perl-GraphicsMagick-1.3.29-bp151.5.6.1 perl-GraphicsMagick-debuginfo-1.3.29-bp151.5.6.1 - openSUSE Backports SLE-15 (x86_64): GraphicsMagick-1.3.29-bp150.2.30.1 GraphicsMagick-devel-1.3.29-bp150.2.30.1 libGraphicsMagick++-Q16-12-1.3.29-bp150.2.30.1 libGraphicsMagick++-devel-1.3.29-bp150.2.30.1 libGraphicsMagick-Q16-3-1.3.29-bp150.2.30.1 libGraphicsMagick3-config-1.3.29-bp150.2.30.1 libGraphicsMagickWand-Q16-2-1.3.29-bp150.2.30.1 perl-GraphicsMagick-1.3.29-bp150.2.30.1 References: https://www.suse.com/security/cve/CVE-2019-16709.html https://bugzilla.suse.com/1151782 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2317-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2317-1 Rating: moderate References: #1151782 Cross-References: CVE-2019-16709 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for GraphicsMagick fixes the following issues: - CVE-2019-16709: Fixed a memory leak in coders/dps.c (boo#1151782). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2317=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2317=1 Package List: - openSUSE Leap 15.1 (x86_64): GraphicsMagick-1.3.29-lp151.4.9.1 GraphicsMagick-debuginfo-1.3.29-lp151.4.9.1 GraphicsMagick-debugsource-1.3.29-lp151.4.9.1 GraphicsMagick-devel-1.3.29-lp151.4.9.1 libGraphicsMagick++-Q16-12-1.3.29-lp151.4.9.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.29-lp151.4.9.1 libGraphicsMagick++-devel-1.3.29-lp151.4.9.1 libGraphicsMagick-Q16-3-1.3.29-lp151.4.9.1 libGraphicsMagick-Q16-3-debuginfo-1.3.29-lp151.4.9.1 libGraphicsMagick3-config-1.3.29-lp151.4.9.1 libGraphicsMagickWand-Q16-2-1.3.29-lp151.4.9.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.29-lp151.4.9.1 perl-GraphicsMagick-1.3.29-lp151.4.9.1 perl-GraphicsMagick-debuginfo-1.3.29-lp151.4.9.1 - openSUSE Leap 15.0 (x86_64): GraphicsMagick-1.3.29-lp150.3.37.1 GraphicsMagick-debuginfo-1.3.29-lp150.3.37.1 GraphicsMagick-debugsource-1.3.29-lp150.3.37.1 GraphicsMagick-devel-1.3.29-lp150.3.37.1 libGraphicsMagick++-Q16-12-1.3.29-lp150.3.37.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.29-lp150.3.37.1 libGraphicsMagick++-devel-1.3.29-lp150.3.37.1 libGraphicsMagick-Q16-3-1.3.29-lp150.3.37.1 libGraphicsMagick-Q16-3-debuginfo-1.3.29-lp150.3.37.1 libGraphicsMagick3-config-1.3.29-lp150.3.37.1 libGraphicsMagickWand-Q16-2-1.3.29-lp150.3.37.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.29-lp150.3.37.1 perl-GraphicsMagick-1.3.29-lp150.3.37.1 perl-GraphicsMagick-debuginfo-1.3.29-lp150.3.37.1 References: https://www.suse.com/security/cve/CVE-2019-16709.html https://bugzilla.suse.com/1151782 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2319-1: important: Security update for libopenmpt
by opensuse-security＠opensuse.org 16 Oct '19

16 Oct '19

openSUSE Security Update: Security update for libopenmpt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2319-1 Rating: important References: #1153102 Cross-References: CVE-2019-17113 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libopenmpt to version 0.3.19 fixes the following issues: - CVE-2019-17113: Fixed a buffer overflow in ModPlug_InstrumentName and ModPlug_SampleName (bsc#1153102). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2319=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libmodplug-devel-0.3.19-lp150.10.1 libmodplug1-0.3.19-lp150.10.1 libmodplug1-debuginfo-0.3.19-lp150.10.1 libopenmpt-debugsource-0.3.19-lp150.10.1 libopenmpt-devel-0.3.19-lp150.10.1 libopenmpt0-0.3.19-lp150.10.1 libopenmpt0-debuginfo-0.3.19-lp150.10.1 libopenmpt_modplug1-0.3.19-lp150.10.1 libopenmpt_modplug1-debuginfo-0.3.19-lp150.10.1 openmpt123-0.3.19-lp150.10.1 openmpt123-debuginfo-0.3.19-lp150.10.1 - openSUSE Leap 15.0 (x86_64): libmodplug1-32bit-0.3.19-lp150.10.1 libmodplug1-32bit-debuginfo-0.3.19-lp150.10.1 libopenmpt0-32bit-0.3.19-lp150.10.1 libopenmpt0-32bit-debuginfo-0.3.19-lp150.10.1 libopenmpt_modplug1-32bit-0.3.19-lp150.10.1 libopenmpt_modplug1-32bit-debuginfo-0.3.19-lp150.10.1 References: https://www.suse.com/security/cve/CVE-2019-17113.html https://bugzilla.suse.com/1153102 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0