November 2019 - openSUSE Security Announce

[security-announce] openSUSE-SU-2019:2595-1: moderate: Security update for clamav
by opensuse-security＠opensuse.org 30 Nov '19

30 Nov '19

openSUSE Security Update: Security update for clamav ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2595-1 Rating: moderate References: #1144504 #1149458 #1151839 Cross-References: CVE-2019-12625 CVE-2019-12900 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for clamav fixes the following issues: Security issue fixed: - CVE-2019-12625: Fixed a ZIP bomb issue by adding detection and heuristics for zips with overlapping files (bsc#1144504). - CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors (bsc#1149458). Non-security issues fixed: - Added the --max-scantime clamscan option and MaxScanTime clamd configuration option (bsc#1144504). - Increased the startup timeout of clamd to 5 minutes to cater for the grown virus database as a workaround until clamd has learned to talk to systemd to extend the timeout as long as needed (bsc#1151839). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2595=1 Package List: - openSUSE Leap 15.1 (x86_64): clamav-0.100.3-lp151.2.3.1 clamav-debuginfo-0.100.3-lp151.2.3.1 clamav-debugsource-0.100.3-lp151.2.3.1 clamav-devel-0.100.3-lp151.2.3.1 libclamav7-0.100.3-lp151.2.3.1 libclamav7-debuginfo-0.100.3-lp151.2.3.1 libclammspack0-0.100.3-lp151.2.3.1 libclammspack0-debuginfo-0.100.3-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-12625.html https://www.suse.com/security/cve/CVE-2019-12900.html https://bugzilla.suse.com/1144504 https://bugzilla.suse.com/1149458 https://bugzilla.suse.com/1151839 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2594-1: important: Security update for strongswan
by opensuse-security＠opensuse.org 30 Nov '19

30 Nov '19

openSUSE Security Update: Security update for strongswan ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2594-1 Rating: important References: #1093536 #1094462 #1107874 #1109845 Cross-References: CVE-2018-10811 CVE-2018-16151 CVE-2018-16152 CVE-2018-17540 CVE-2018-5388 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for strongswan fixes the following issues: Security issues fixed: - CVE-2018-5388: Fixed a buffer underflow which may allow to a remote attacker with local user credentials to resource exhaustion and denial of service while reading from the socket (bsc#1094462). - CVE-2018-10811: Fixed a denial of service during the IKEv2 key derivation if the openssl plugin is used in FIPS mode and HMAC-MD5 is negotiated as PRF (bsc#1093536). - CVE-2018-16151,CVE-2018-16152: Fixed multiple flaws in the gmp plugin which might lead to authorization bypass (bsc#1107874). - CVE-2018-17540: Fixed an improper input validation in gmp plugin (bsc#1109845). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2594=1 Package List: - openSUSE Leap 15.0 (noarch): strongswan-doc-5.6.0-lp150.3.3.1 - openSUSE Leap 15.0 (x86_64): strongswan-5.6.0-lp150.3.3.1 strongswan-debuginfo-5.6.0-lp150.3.3.1 strongswan-debugsource-5.6.0-lp150.3.3.1 strongswan-hmac-5.6.0-lp150.3.3.1 strongswan-ipsec-5.6.0-lp150.3.3.1 strongswan-ipsec-debuginfo-5.6.0-lp150.3.3.1 strongswan-libs0-5.6.0-lp150.3.3.1 strongswan-libs0-debuginfo-5.6.0-lp150.3.3.1 strongswan-mysql-5.6.0-lp150.3.3.1 strongswan-mysql-debuginfo-5.6.0-lp150.3.3.1 strongswan-nm-5.6.0-lp150.3.3.1 strongswan-nm-debuginfo-5.6.0-lp150.3.3.1 strongswan-sqlite-5.6.0-lp150.3.3.1 strongswan-sqlite-debuginfo-5.6.0-lp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-10811.html https://www.suse.com/security/cve/CVE-2018-16151.html https://www.suse.com/security/cve/CVE-2018-16152.html https://www.suse.com/security/cve/CVE-2018-17540.html https://www.suse.com/security/cve/CVE-2018-5388.html https://bugzilla.suse.com/1093536 https://bugzilla.suse.com/1094462 https://bugzilla.suse.com/1107874 https://bugzilla.suse.com/1109845 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2596-1: moderate: Security update for cpio
by opensuse-security＠opensuse.org 30 Nov '19

30 Nov '19

openSUSE Security Update: Security update for cpio ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2596-1 Rating: moderate References: #1155199 Cross-References: CVE-2019-14866 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for cpio fixes the following issues: - CVE-2019-14866: Fixed an improper validation of the values written in the header of a TAR file through the to_oct() function which could have led to unexpected TAR generation (bsc#1155199). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2596=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): cpio-2.12-lp151.3.3.1 cpio-debuginfo-2.12-lp151.3.3.1 cpio-debugsource-2.12-lp151.3.3.1 cpio-mt-2.12-lp151.3.3.1 cpio-mt-debuginfo-2.12-lp151.3.3.1 - openSUSE Leap 15.1 (noarch): cpio-lang-2.12-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-14866.html https://bugzilla.suse.com/1155199 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2593-1: moderate: Security update for cpio
by opensuse-security＠opensuse.org 30 Nov '19

30 Nov '19

openSUSE Security Update: Security update for cpio ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2593-1 Rating: moderate References: #1155199 Cross-References: CVE-2019-14866 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for cpio fixes the following issues: - CVE-2019-14866: Fixed an improper validation of the values written in the header of a TAR file through the to_oct() function which could have led to unexpected TAR generation (bsc#1155199). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2593=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): cpio-2.12-lp150.2.3.1 cpio-debuginfo-2.12-lp150.2.3.1 cpio-debugsource-2.12-lp150.2.3.1 cpio-mt-2.12-lp150.2.3.1 cpio-mt-debuginfo-2.12-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): cpio-lang-2.12-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-14866.html https://bugzilla.suse.com/1155199 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2591-1: important: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 30 Nov '19

30 Nov '19

openSUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2591-1 Rating: important References: #1155321 #1156318 Cross-References: CVE-2019-8551 CVE-2019-8558 CVE-2019-8559 CVE-2019-8563 CVE-2019-8625 CVE-2019-8674 CVE-2019-8681 CVE-2019-8684 CVE-2019-8686 CVE-2019-8687 CVE-2019-8688 CVE-2019-8689 CVE-2019-8690 CVE-2019-8707 CVE-2019-8710 CVE-2019-8719 CVE-2019-8720 CVE-2019-8726 CVE-2019-8733 CVE-2019-8735 CVE-2019-8743 CVE-2019-8763 CVE-2019-8764 CVE-2019-8765 CVE-2019-8766 CVE-2019-8768 CVE-2019-8769 CVE-2019-8771 CVE-2019-8782 CVE-2019-8783 CVE-2019-8808 CVE-2019-8811 CVE-2019-8812 CVE-2019-8813 CVE-2019-8814 CVE-2019-8815 CVE-2019-8816 CVE-2019-8819 CVE-2019-8820 CVE-2019-8821 CVE-2019-8822 CVE-2019-8823 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 42 vulnerabilities is now available. Description: This update for webkit2gtk3 to version 2.26.2 fixes the following issues: Webkit2gtk3 was updated to version 2.26.2 (WSA-2019-0005 and WSA-2019-0006, bsc#1155321 bsc#1156318) Security issues addressed: - CVE-2019-8625: Fixed a logic issue where by processing maliciously crafted web content may lead to universal cross site scripting. - CVE-2019-8674: Fixed a logic issue where by processing maliciously crafted web content may lead to universal cross site scripting. - CVE-2019-8707: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8719: Fixed a logic issue where by processing maliciously crafted web content may lead to universal cross site scripting. - CVE-2019-8720: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8726: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8733: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8735: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8763: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8768: Fixed an issue where a user may be unable to delete browsing history items. - CVE-2019-8769: Fixed an issue where a maliciously crafted website may reveal browsing history. - CVE-2019-8771: Fixed an issue where a maliciously crafted web content may violate iframe sandboxing policy. - CVE-2019-8710: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8743: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8764: Fixed a logic issue where by processing maliciously crafted web content may lead to universal cross site scripting. - CVE-2019-8765: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8766: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8782: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8783: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8808: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8811: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8812: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8813: Fixed a logic issue where by processing maliciously crafted web content may lead to universal cross site scripting. - CVE-2019-8814: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8815: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8816: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8819: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8820: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8821: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8822: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8823: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2591=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1 libjavascriptcoregtk-4_0-18-debuginfo-2.26.2-lp151.2.9.1 libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1 libwebkit2gtk-4_0-37-debuginfo-2.26.2-lp151.2.9.1 typelib-1_0-JavaScriptCore-4_0-2.26.2-lp151.2.9.1 typelib-1_0-WebKit2-4_0-2.26.2-lp151.2.9.1 typelib-1_0-WebKit2WebExtension-4_0-2.26.2-lp151.2.9.1 webkit-jsc-4-2.26.2-lp151.2.9.1 webkit-jsc-4-debuginfo-2.26.2-lp151.2.9.1 webkit2gtk-4_0-injected-bundles-2.26.2-lp151.2.9.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.26.2-lp151.2.9.1 webkit2gtk3-debugsource-2.26.2-lp151.2.9.1 webkit2gtk3-devel-2.26.2-lp151.2.9.1 webkit2gtk3-minibrowser-2.26.2-lp151.2.9.1 webkit2gtk3-minibrowser-debuginfo-2.26.2-lp151.2.9.1 - openSUSE Leap 15.1 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1 libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.26.2-lp151.2.9.1 libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1 libwebkit2gtk-4_0-37-32bit-debuginfo-2.26.2-lp151.2.9.1 - openSUSE Leap 15.1 (noarch): libwebkit2gtk3-lang-2.26.2-lp151.2.9.1 References: https://www.suse.com/security/cve/CVE-2019-8551.html https://www.suse.com/security/cve/CVE-2019-8558.html https://www.suse.com/security/cve/CVE-2019-8559.html https://www.suse.com/security/cve/CVE-2019-8563.html https://www.suse.com/security/cve/CVE-2019-8625.html https://www.suse.com/security/cve/CVE-2019-8674.html https://www.suse.com/security/cve/CVE-2019-8681.html https://www.suse.com/security/cve/CVE-2019-8684.html https://www.suse.com/security/cve/CVE-2019-8686.html https://www.suse.com/security/cve/CVE-2019-8687.html https://www.suse.com/security/cve/CVE-2019-8688.html https://www.suse.com/security/cve/CVE-2019-8689.html https://www.suse.com/security/cve/CVE-2019-8690.html https://www.suse.com/security/cve/CVE-2019-8707.html https://www.suse.com/security/cve/CVE-2019-8710.html https://www.suse.com/security/cve/CVE-2019-8719.html https://www.suse.com/security/cve/CVE-2019-8720.html https://www.suse.com/security/cve/CVE-2019-8726.html https://www.suse.com/security/cve/CVE-2019-8733.html https://www.suse.com/security/cve/CVE-2019-8735.html https://www.suse.com/security/cve/CVE-2019-8743.html https://www.suse.com/security/cve/CVE-2019-8763.html https://www.suse.com/security/cve/CVE-2019-8764.html https://www.suse.com/security/cve/CVE-2019-8765.html https://www.suse.com/security/cve/CVE-2019-8766.html https://www.suse.com/security/cve/CVE-2019-8768.html https://www.suse.com/security/cve/CVE-2019-8769.html https://www.suse.com/security/cve/CVE-2019-8771.html https://www.suse.com/security/cve/CVE-2019-8782.html https://www.suse.com/security/cve/CVE-2019-8783.html https://www.suse.com/security/cve/CVE-2019-8808.html https://www.suse.com/security/cve/CVE-2019-8811.html https://www.suse.com/security/cve/CVE-2019-8812.html https://www.suse.com/security/cve/CVE-2019-8813.html https://www.suse.com/security/cve/CVE-2019-8814.html https://www.suse.com/security/cve/CVE-2019-8815.html https://www.suse.com/security/cve/CVE-2019-8816.html https://www.suse.com/security/cve/CVE-2019-8819.html https://www.suse.com/security/cve/CVE-2019-8820.html https://www.suse.com/security/cve/CVE-2019-8821.html https://www.suse.com/security/cve/CVE-2019-8822.html https://www.suse.com/security/cve/CVE-2019-8823.html https://bugzilla.suse.com/1155321 https://bugzilla.suse.com/1156318 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2587-1: important: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 30 Nov '19

30 Nov '19

openSUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2587-1 Rating: important References: #1155321 #1156318 Cross-References: CVE-2019-8551 CVE-2019-8558 CVE-2019-8559 CVE-2019-8563 CVE-2019-8625 CVE-2019-8674 CVE-2019-8681 CVE-2019-8684 CVE-2019-8686 CVE-2019-8687 CVE-2019-8688 CVE-2019-8689 CVE-2019-8690 CVE-2019-8707 CVE-2019-8710 CVE-2019-8719 CVE-2019-8720 CVE-2019-8726 CVE-2019-8733 CVE-2019-8735 CVE-2019-8743 CVE-2019-8763 CVE-2019-8764 CVE-2019-8765 CVE-2019-8766 CVE-2019-8768 CVE-2019-8769 CVE-2019-8771 CVE-2019-8782 CVE-2019-8783 CVE-2019-8808 CVE-2019-8811 CVE-2019-8812 CVE-2019-8813 CVE-2019-8814 CVE-2019-8815 CVE-2019-8816 CVE-2019-8819 CVE-2019-8820 CVE-2019-8821 CVE-2019-8822 CVE-2019-8823 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 42 vulnerabilities is now available. Description: This update for webkit2gtk3 to version 2.26.2 fixes the following issues: Webkit2gtk3 was updated to version 2.26.2 (WSA-2019-0005 and WSA-2019-0006, bsc#1155321 bsc#1156318) Security issues addressed: - CVE-2019-8625: Fixed a logic issue where by processing maliciously crafted web content may lead to universal cross site scripting. - CVE-2019-8674: Fixed a logic issue where by processing maliciously crafted web content may lead to universal cross site scripting. - CVE-2019-8707: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8719: Fixed a logic issue where by processing maliciously crafted web content may lead to universal cross site scripting. - CVE-2019-8720: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8726: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8733: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8735: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8763: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8768: Fixed an issue where a user may be unable to delete browsing history items. - CVE-2019-8769: Fixed an issue where a maliciously crafted website may reveal browsing history. - CVE-2019-8771: Fixed an issue where a maliciously crafted web content may violate iframe sandboxing policy. - CVE-2019-8710: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8743: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8764: Fixed a logic issue where by processing maliciously crafted web content may lead to universal cross site scripting. - CVE-2019-8765: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8766: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8782: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8783: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8808: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8811: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8812: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8813: Fixed a logic issue where by processing maliciously crafted web content may lead to universal cross site scripting. - CVE-2019-8814: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8815: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8816: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8819: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8820: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8821: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8822: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2019-8823: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2587=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libjavascriptcoregtk-4_0-18-2.26.2-lp150.2.28.1 libjavascriptcoregtk-4_0-18-debuginfo-2.26.2-lp150.2.28.1 libwebkit2gtk-4_0-37-2.26.2-lp150.2.28.1 libwebkit2gtk-4_0-37-debuginfo-2.26.2-lp150.2.28.1 typelib-1_0-JavaScriptCore-4_0-2.26.2-lp150.2.28.1 typelib-1_0-WebKit2-4_0-2.26.2-lp150.2.28.1 typelib-1_0-WebKit2WebExtension-4_0-2.26.2-lp150.2.28.1 webkit-jsc-4-2.26.2-lp150.2.28.1 webkit-jsc-4-debuginfo-2.26.2-lp150.2.28.1 webkit2gtk-4_0-injected-bundles-2.26.2-lp150.2.28.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.26.2-lp150.2.28.1 webkit2gtk3-debugsource-2.26.2-lp150.2.28.1 webkit2gtk3-devel-2.26.2-lp150.2.28.1 webkit2gtk3-minibrowser-2.26.2-lp150.2.28.1 webkit2gtk3-minibrowser-debuginfo-2.26.2-lp150.2.28.1 - openSUSE Leap 15.0 (noarch): libwebkit2gtk3-lang-2.26.2-lp150.2.28.1 - openSUSE Leap 15.0 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp150.2.28.1 libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.26.2-lp150.2.28.1 libwebkit2gtk-4_0-37-32bit-2.26.2-lp150.2.28.1 libwebkit2gtk-4_0-37-32bit-debuginfo-2.26.2-lp150.2.28.1 References: https://www.suse.com/security/cve/CVE-2019-8551.html https://www.suse.com/security/cve/CVE-2019-8558.html https://www.suse.com/security/cve/CVE-2019-8559.html https://www.suse.com/security/cve/CVE-2019-8563.html https://www.suse.com/security/cve/CVE-2019-8625.html https://www.suse.com/security/cve/CVE-2019-8674.html https://www.suse.com/security/cve/CVE-2019-8681.html https://www.suse.com/security/cve/CVE-2019-8684.html https://www.suse.com/security/cve/CVE-2019-8686.html https://www.suse.com/security/cve/CVE-2019-8687.html https://www.suse.com/security/cve/CVE-2019-8688.html https://www.suse.com/security/cve/CVE-2019-8689.html https://www.suse.com/security/cve/CVE-2019-8690.html https://www.suse.com/security/cve/CVE-2019-8707.html https://www.suse.com/security/cve/CVE-2019-8710.html https://www.suse.com/security/cve/CVE-2019-8719.html https://www.suse.com/security/cve/CVE-2019-8720.html https://www.suse.com/security/cve/CVE-2019-8726.html https://www.suse.com/security/cve/CVE-2019-8733.html https://www.suse.com/security/cve/CVE-2019-8735.html https://www.suse.com/security/cve/CVE-2019-8743.html https://www.suse.com/security/cve/CVE-2019-8763.html https://www.suse.com/security/cve/CVE-2019-8764.html https://www.suse.com/security/cve/CVE-2019-8765.html https://www.suse.com/security/cve/CVE-2019-8766.html https://www.suse.com/security/cve/CVE-2019-8768.html https://www.suse.com/security/cve/CVE-2019-8769.html https://www.suse.com/security/cve/CVE-2019-8771.html https://www.suse.com/security/cve/CVE-2019-8782.html https://www.suse.com/security/cve/CVE-2019-8783.html https://www.suse.com/security/cve/CVE-2019-8808.html https://www.suse.com/security/cve/CVE-2019-8811.html https://www.suse.com/security/cve/CVE-2019-8812.html https://www.suse.com/security/cve/CVE-2019-8813.html https://www.suse.com/security/cve/CVE-2019-8814.html https://www.suse.com/security/cve/CVE-2019-8815.html https://www.suse.com/security/cve/CVE-2019-8816.html https://www.suse.com/security/cve/CVE-2019-8819.html https://www.suse.com/security/cve/CVE-2019-8820.html https://www.suse.com/security/cve/CVE-2019-8821.html https://www.suse.com/security/cve/CVE-2019-8822.html https://www.suse.com/security/cve/CVE-2019-8823.html https://bugzilla.suse.com/1155321 https://bugzilla.suse.com/1156318 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2588-1: moderate: Security update for bluez
by opensuse-security＠opensuse.org 30 Nov '19

30 Nov '19

openSUSE Security Update: Security update for bluez ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2588-1 Rating: moderate References: #1013712 Cross-References: CVE-2016-9798 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bluez fixes the following issues: - CVE-2016-9798: Fixed a use-after-free in conf_opt() (bsc#1013712). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2588=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): bluez-5.48-lp151.8.6.1 bluez-cups-5.48-lp151.8.6.1 bluez-cups-debuginfo-5.48-lp151.8.6.1 bluez-debuginfo-5.48-lp151.8.6.1 bluez-debugsource-5.48-lp151.8.6.1 bluez-devel-5.48-lp151.8.6.1 bluez-test-5.48-lp151.8.6.1 bluez-test-debuginfo-5.48-lp151.8.6.1 libbluetooth3-5.48-lp151.8.6.1 libbluetooth3-debuginfo-5.48-lp151.8.6.1 - openSUSE Leap 15.1 (x86_64): bluez-devel-32bit-5.48-lp151.8.6.1 libbluetooth3-32bit-5.48-lp151.8.6.1 libbluetooth3-32bit-debuginfo-5.48-lp151.8.6.1 - openSUSE Leap 15.1 (noarch): bluez-auto-enable-devices-5.48-lp151.8.6.1 References: https://www.suse.com/security/cve/CVE-2016-9798.html https://bugzilla.suse.com/1013712 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2585-1: moderate: Security update for bluez
by opensuse-security＠opensuse.org 30 Nov '19

30 Nov '19

openSUSE Security Update: Security update for bluez ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2585-1 Rating: moderate References: #1013712 Cross-References: CVE-2016-9798 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bluez fixes the following issues: - CVE-2016-9798: Fixed a use-after-free in conf_opt() (bsc#1013712). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2585=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): bluez-5.48-lp150.4.16.1 bluez-cups-5.48-lp150.4.16.1 bluez-cups-debuginfo-5.48-lp150.4.16.1 bluez-debuginfo-5.48-lp150.4.16.1 bluez-debugsource-5.48-lp150.4.16.1 bluez-devel-5.48-lp150.4.16.1 bluez-test-5.48-lp150.4.16.1 bluez-test-debuginfo-5.48-lp150.4.16.1 libbluetooth3-5.48-lp150.4.16.1 libbluetooth3-debuginfo-5.48-lp150.4.16.1 - openSUSE Leap 15.0 (x86_64): bluez-devel-32bit-5.48-lp150.4.16.1 libbluetooth3-32bit-5.48-lp150.4.16.1 libbluetooth3-32bit-debuginfo-5.48-lp150.4.16.1 - openSUSE Leap 15.0 (noarch): bluez-auto-enable-devices-5.48-lp150.4.16.1 References: https://www.suse.com/security/cve/CVE-2016-9798.html https://bugzilla.suse.com/1013712 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2575-1: important: Security update for cups
by opensuse-security＠opensuse.org 27 Nov '19

27 Nov '19

openSUSE Security Update: Security update for cups ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2575-1 Rating: important References: #1146358 #1146359 Cross-References: CVE-2019-8675 CVE-2019-8696 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for cups fixes the following issues: - CVE-2019-8675: Fixed a stack buffer overflow in libcups's asn1_get_type function(bsc#1146358). - CVE-2019-8696: Fixed a stack buffer overflow in libcups's asn1_get_packed function (bsc#1146359). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2575=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): cups-2.2.7-lp151.6.3.1 cups-client-2.2.7-lp151.6.3.1 cups-client-debuginfo-2.2.7-lp151.6.3.1 cups-config-2.2.7-lp151.6.3.1 cups-ddk-2.2.7-lp151.6.3.1 cups-ddk-debuginfo-2.2.7-lp151.6.3.1 cups-debuginfo-2.2.7-lp151.6.3.1 cups-debugsource-2.2.7-lp151.6.3.1 cups-devel-2.2.7-lp151.6.3.1 libcups2-2.2.7-lp151.6.3.1 libcups2-debuginfo-2.2.7-lp151.6.3.1 libcupscgi1-2.2.7-lp151.6.3.1 libcupscgi1-debuginfo-2.2.7-lp151.6.3.1 libcupsimage2-2.2.7-lp151.6.3.1 libcupsimage2-debuginfo-2.2.7-lp151.6.3.1 libcupsmime1-2.2.7-lp151.6.3.1 libcupsmime1-debuginfo-2.2.7-lp151.6.3.1 libcupsppdc1-2.2.7-lp151.6.3.1 libcupsppdc1-debuginfo-2.2.7-lp151.6.3.1 - openSUSE Leap 15.1 (x86_64): cups-devel-32bit-2.2.7-lp151.6.3.1 libcups2-32bit-2.2.7-lp151.6.3.1 libcups2-32bit-debuginfo-2.2.7-lp151.6.3.1 libcupscgi1-32bit-2.2.7-lp151.6.3.1 libcupscgi1-32bit-debuginfo-2.2.7-lp151.6.3.1 libcupsimage2-32bit-2.2.7-lp151.6.3.1 libcupsimage2-32bit-debuginfo-2.2.7-lp151.6.3.1 libcupsmime1-32bit-2.2.7-lp151.6.3.1 libcupsmime1-32bit-debuginfo-2.2.7-lp151.6.3.1 libcupsppdc1-32bit-2.2.7-lp151.6.3.1 libcupsppdc1-32bit-debuginfo-2.2.7-lp151.6.3.1 References: https://www.suse.com/security/cve/CVE-2019-8675.html https://www.suse.com/security/cve/CVE-2019-8696.html https://bugzilla.suse.com/1146358 https://bugzilla.suse.com/1146359 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2576-1: moderate: Security update for djvulibre
by opensuse-security＠opensuse.org 27 Nov '19

27 Nov '19

openSUSE Security Update: Security update for djvulibre ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2576-1 Rating: moderate References: #1154401 #1156188 Cross-References: CVE-2019-18804 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for djvulibre fixes the following issues: Security issue fixed: - CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188). Other issue addressed: - Fixed a crash when mmx was enabled (bsc#1154401) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2576=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): djvulibre-3.5.27-lp151.3.6.1 djvulibre-debuginfo-3.5.27-lp151.3.6.1 djvulibre-debugsource-3.5.27-lp151.3.6.1 djvulibre-doc-3.5.27-lp151.3.6.1 libdjvulibre-devel-3.5.27-lp151.3.6.1 libdjvulibre21-3.5.27-lp151.3.6.1 libdjvulibre21-debuginfo-3.5.27-lp151.3.6.1 References: https://www.suse.com/security/cve/CVE-2019-18804.html https://bugzilla.suse.com/1154401 https://bugzilla.suse.com/1156188 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2574-1: moderate: Security update for djvulibre
by opensuse-security＠opensuse.org 27 Nov '19

27 Nov '19

openSUSE Security Update: Security update for djvulibre ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2574-1 Rating: moderate References: #1154401 #1156188 Cross-References: CVE-2019-18804 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for djvulibre fixes the following issues: Security issue fixed: - CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188). Other issue addressed: - Fixed a crash when mmx was enabled (bsc#1154401) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2574=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): djvulibre-3.5.27-lp150.2.6.1 djvulibre-debuginfo-3.5.27-lp150.2.6.1 djvulibre-debugsource-3.5.27-lp150.2.6.1 djvulibre-doc-3.5.27-lp150.2.6.1 libdjvulibre-devel-3.5.27-lp150.2.6.1 libdjvulibre21-3.5.27-lp150.2.6.1 libdjvulibre21-debuginfo-3.5.27-lp150.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-18804.html https://bugzilla.suse.com/1154401 https://bugzilla.suse.com/1156188 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2573-1: important: Security update for cups
by opensuse-security＠opensuse.org 27 Nov '19

27 Nov '19

openSUSE Security Update: Security update for cups ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2573-1 Rating: important References: #1146358 #1146359 Cross-References: CVE-2019-8675 CVE-2019-8696 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for cups fixes the following issues: - CVE-2019-8675: Fixed a stack buffer overflow in libcups's asn1_get_type function(bsc#1146358). - CVE-2019-8696: Fixed a stack buffer overflow in libcups's asn1_get_packed function (bsc#1146359). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2573=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): cups-2.2.7-lp150.2.13.1 cups-client-2.2.7-lp150.2.13.1 cups-client-debuginfo-2.2.7-lp150.2.13.1 cups-config-2.2.7-lp150.2.13.1 cups-ddk-2.2.7-lp150.2.13.1 cups-ddk-debuginfo-2.2.7-lp150.2.13.1 cups-debuginfo-2.2.7-lp150.2.13.1 cups-debugsource-2.2.7-lp150.2.13.1 cups-devel-2.2.7-lp150.2.13.1 libcups2-2.2.7-lp150.2.13.1 libcups2-debuginfo-2.2.7-lp150.2.13.1 libcupscgi1-2.2.7-lp150.2.13.1 libcupscgi1-debuginfo-2.2.7-lp150.2.13.1 libcupsimage2-2.2.7-lp150.2.13.1 libcupsimage2-debuginfo-2.2.7-lp150.2.13.1 libcupsmime1-2.2.7-lp150.2.13.1 libcupsmime1-debuginfo-2.2.7-lp150.2.13.1 libcupsppdc1-2.2.7-lp150.2.13.1 libcupsppdc1-debuginfo-2.2.7-lp150.2.13.1 - openSUSE Leap 15.0 (x86_64): cups-devel-32bit-2.2.7-lp150.2.13.1 libcups2-32bit-2.2.7-lp150.2.13.1 libcups2-32bit-debuginfo-2.2.7-lp150.2.13.1 libcupscgi1-32bit-2.2.7-lp150.2.13.1 libcupscgi1-32bit-debuginfo-2.2.7-lp150.2.13.1 libcupsimage2-32bit-2.2.7-lp150.2.13.1 libcupsimage2-32bit-debuginfo-2.2.7-lp150.2.13.1 libcupsmime1-32bit-2.2.7-lp150.2.13.1 libcupsmime1-32bit-debuginfo-2.2.7-lp150.2.13.1 libcupsppdc1-32bit-2.2.7-lp150.2.13.1 libcupsppdc1-32bit-debuginfo-2.2.7-lp150.2.13.1 References: https://www.suse.com/security/cve/CVE-2019-8675.html https://www.suse.com/security/cve/CVE-2019-8696.html https://bugzilla.suse.com/1146358 https://bugzilla.suse.com/1146359 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2565-1: important: Security update for java-11-openjdk
by opensuse-security＠opensuse.org 25 Nov '19

25 Nov '19

openSUSE Security Update: Security update for java-11-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2565-1 Rating: important References: #1152856 #1154212 Cross-References: CVE-2019-2894 CVE-2019-2933 CVE-2019-2945 CVE-2019-2949 CVE-2019-2958 CVE-2019-2962 CVE-2019-2964 CVE-2019-2973 CVE-2019-2975 CVE-2019-2977 CVE-2019-2978 CVE-2019-2981 CVE-2019-2983 CVE-2019-2987 CVE-2019-2988 CVE-2019-2989 CVE-2019-2992 CVE-2019-2999 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 18 vulnerabilities is now available. Description: This update for java-11-openjdk to version jdk-11.0.5-10 fixes the following issues: Security issues fixed (October 2019 CPU bsc#1154212): - CVE-2019-2933: Windows file handling redux - CVE-2019-2945: Better socket support - CVE-2019-2949: Better Kerberos ccache handling - CVE-2019-2958: Build Better Processes - CVE-2019-2964: Better support for patterns - CVE-2019-2962: Better Glyph Images - CVE-2019-2973: Better pattern compilation - CVE-2019-2975: Unexpected exception in jjs - CVE-2019-2978: Improved handling of jar files - CVE-2019-2977: Improve String index handling - CVE-2019-2981: Better Path supports - CVE-2019-2983: Better serial attributes - CVE-2019-2987: Better rendering of native glyphs - CVE-2019-2988: Better Graphics2D drawing - CVE-2019-2989: Improve TLS connection support - CVE-2019-2992: Enhance font glyph mapping - CVE-2019-2999: Commentary on Javadoc comments - CVE-2019-2894: Enhance ECDSA operations (bsc#1152856). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2565=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): java-11-openjdk-11.0.5.0-lp151.3.9.2 java-11-openjdk-accessibility-11.0.5.0-lp151.3.9.2 java-11-openjdk-accessibility-debuginfo-11.0.5.0-lp151.3.9.2 java-11-openjdk-debuginfo-11.0.5.0-lp151.3.9.2 java-11-openjdk-debugsource-11.0.5.0-lp151.3.9.2 java-11-openjdk-demo-11.0.5.0-lp151.3.9.2 java-11-openjdk-devel-11.0.5.0-lp151.3.9.2 java-11-openjdk-headless-11.0.5.0-lp151.3.9.2 java-11-openjdk-jmods-11.0.5.0-lp151.3.9.2 java-11-openjdk-src-11.0.5.0-lp151.3.9.2 - openSUSE Leap 15.1 (noarch): java-11-openjdk-javadoc-11.0.5.0-lp151.3.9.2 References: https://www.suse.com/security/cve/CVE-2019-2894.html https://www.suse.com/security/cve/CVE-2019-2933.html https://www.suse.com/security/cve/CVE-2019-2945.html https://www.suse.com/security/cve/CVE-2019-2949.html https://www.suse.com/security/cve/CVE-2019-2958.html https://www.suse.com/security/cve/CVE-2019-2962.html https://www.suse.com/security/cve/CVE-2019-2964.html https://www.suse.com/security/cve/CVE-2019-2973.html https://www.suse.com/security/cve/CVE-2019-2975.html https://www.suse.com/security/cve/CVE-2019-2977.html https://www.suse.com/security/cve/CVE-2019-2978.html https://www.suse.com/security/cve/CVE-2019-2981.html https://www.suse.com/security/cve/CVE-2019-2983.html https://www.suse.com/security/cve/CVE-2019-2987.html https://www.suse.com/security/cve/CVE-2019-2988.html https://www.suse.com/security/cve/CVE-2019-2989.html https://www.suse.com/security/cve/CVE-2019-2992.html https://www.suse.com/security/cve/CVE-2019-2999.html https://bugzilla.suse.com/1152856 https://bugzilla.suse.com/1154212 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2558-1: moderate: Security update for apache2-mod_perl
by opensuse-security＠opensuse.org 24 Nov '19

24 Nov '19

openSUSE Security Update: Security update for apache2-mod_perl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2558-1 Rating: moderate References: #1091625 #1156944 Cross-References: CVE-2011-2767 Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for apache2-mod_perl to version 2.0.11 fixes the following issues: Security issue fixed: - CVE-2011-2767: Fixed a vulnerability which could have allowed perl code execution in the context of user account (bsc#1156944). Other issue addressed: - Restore process name after sv_setpv_mg() call. (bsc#1091625) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2558=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2558=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): apache2-mod_perl-2.0.11-bp151.4.3.1 apache2-mod_perl-debuginfo-2.0.11-bp151.4.3.1 apache2-mod_perl-debugsource-2.0.11-bp151.4.3.1 apache2-mod_perl-devel-2.0.11-bp151.4.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): apache2-mod_perl-2.0.11-bp150.3.3.1 apache2-mod_perl-devel-2.0.11-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2011-2767.html https://bugzilla.suse.com/1091625 https://bugzilla.suse.com/1156944 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2557-1: important: Security update for java-11-openjdk
by opensuse-security＠opensuse.org 24 Nov '19

24 Nov '19

openSUSE Security Update: Security update for java-11-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2557-1 Rating: important References: #1152856 #1154212 Cross-References: CVE-2019-2894 CVE-2019-2933 CVE-2019-2945 CVE-2019-2949 CVE-2019-2958 CVE-2019-2962 CVE-2019-2964 CVE-2019-2973 CVE-2019-2975 CVE-2019-2977 CVE-2019-2978 CVE-2019-2981 CVE-2019-2983 CVE-2019-2987 CVE-2019-2988 CVE-2019-2989 CVE-2019-2992 CVE-2019-2999 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 18 vulnerabilities is now available. Description: This update for java-11-openjdk to version jdk-11.0.5-10 fixes the following issues: Security issues fixed (October 2019 CPU bsc#1154212): - CVE-2019-2933: Windows file handling redux - CVE-2019-2945: Better socket support - CVE-2019-2949: Better Kerberos ccache handling - CVE-2019-2958: Build Better Processes - CVE-2019-2964: Better support for patterns - CVE-2019-2962: Better Glyph Images - CVE-2019-2973: Better pattern compilation - CVE-2019-2975: Unexpected exception in jjs - CVE-2019-2978: Improved handling of jar files - CVE-2019-2977: Improve String index handling - CVE-2019-2981: Better Path supports - CVE-2019-2983: Better serial attributes - CVE-2019-2987: Better rendering of native glyphs - CVE-2019-2988: Better Graphics2D drawing - CVE-2019-2989: Improve TLS connection support - CVE-2019-2992: Enhance font glyph mapping - CVE-2019-2999: Commentary on Javadoc comments - CVE-2019-2894: Enhance ECDSA operations (bsc#1152856). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2557=1 Package List: - openSUSE Leap 15.0 (x86_64): java-11-openjdk-11.0.5.0-lp150.2.28.1 java-11-openjdk-accessibility-11.0.5.0-lp150.2.28.1 java-11-openjdk-accessibility-debuginfo-11.0.5.0-lp150.2.28.1 java-11-openjdk-debuginfo-11.0.5.0-lp150.2.28.1 java-11-openjdk-debugsource-11.0.5.0-lp150.2.28.1 java-11-openjdk-demo-11.0.5.0-lp150.2.28.1 java-11-openjdk-devel-11.0.5.0-lp150.2.28.1 java-11-openjdk-headless-11.0.5.0-lp150.2.28.1 java-11-openjdk-jmods-11.0.5.0-lp150.2.28.1 java-11-openjdk-src-11.0.5.0-lp150.2.28.1 - openSUSE Leap 15.0 (noarch): java-11-openjdk-javadoc-11.0.5.0-lp150.2.28.1 References: https://www.suse.com/security/cve/CVE-2019-2894.html https://www.suse.com/security/cve/CVE-2019-2933.html https://www.suse.com/security/cve/CVE-2019-2945.html https://www.suse.com/security/cve/CVE-2019-2949.html https://www.suse.com/security/cve/CVE-2019-2958.html https://www.suse.com/security/cve/CVE-2019-2962.html https://www.suse.com/security/cve/CVE-2019-2964.html https://www.suse.com/security/cve/CVE-2019-2973.html https://www.suse.com/security/cve/CVE-2019-2975.html https://www.suse.com/security/cve/CVE-2019-2977.html https://www.suse.com/security/cve/CVE-2019-2978.html https://www.suse.com/security/cve/CVE-2019-2981.html https://www.suse.com/security/cve/CVE-2019-2983.html https://www.suse.com/security/cve/CVE-2019-2987.html https://www.suse.com/security/cve/CVE-2019-2988.html https://www.suse.com/security/cve/CVE-2019-2989.html https://www.suse.com/security/cve/CVE-2019-2992.html https://www.suse.com/security/cve/CVE-2019-2999.html https://bugzilla.suse.com/1152856 https://bugzilla.suse.com/1154212 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2549-1: moderate: Security update for apache2-mod_perl
by opensuse-security＠opensuse.org 23 Nov '19

23 Nov '19

openSUSE Security Update: Security update for apache2-mod_perl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2549-1 Rating: moderate References: #1091625 #1156944 Cross-References: CVE-2011-2767 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for apache2-mod_perl to version 2.0.11 fixes the following issues: Security issue fixed: - CVE-2011-2767: Fixed a vulnerability which could have allowed perl code execution in the context of user account (bsc#1156944). Other issue addressed: - Restore process name after sv_setpv_mg() call. (bsc#1091625) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2549=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2549=1 Package List: - openSUSE Leap 15.1 (x86_64): apache2-mod_perl-2.0.11-lp151.3.3.1 apache2-mod_perl-debuginfo-2.0.11-lp151.3.3.1 apache2-mod_perl-debugsource-2.0.11-lp151.3.3.1 apache2-mod_perl-devel-2.0.11-lp151.3.3.1 - openSUSE Leap 15.0 (x86_64): apache2-mod_perl-2.0.11-lp150.2.3.1 apache2-mod_perl-debuginfo-2.0.11-lp150.2.3.1 apache2-mod_perl-debugsource-2.0.11-lp150.2.3.1 apache2-mod_perl-devel-2.0.11-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2011-2767.html https://bugzilla.suse.com/1091625 https://bugzilla.suse.com/1156944 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2556-1: moderate: Security update for haproxy
by opensuse-security＠opensuse.org 23 Nov '19

23 Nov '19

openSUSE Security Update: Security update for haproxy ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2556-1 Rating: moderate References: #1142529 Cross-References: CVE-2019-14241 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for haproxy to version 2.0.5+git0.d905f49a fixes the following issues: Security issue fixed: - CVE-2019-14241: Fixed a cookie memory corruption problem. (bsc#1142529) The update to 2.0.5 brings lots of features and bugfixes: - new internal native HTTP representation called HTX, was already in 1.9 and is now enabled by default in 2.0 - end-to-end HTTP/2 support including trailers and continuation frames, as needed for gRPC ; HTTP/2 may also be upgraded from HTTP/1.1 using the H2 preface; - server connection pooling and more advanced reuse, with ALPN protocol negotiation (already in 1.9) - layer 7 retries, allowing to use 0-RTT and TCP Fast Open to the servers as well as on the frontend - much more scalable multi-threading, which is even enabled by default on platforms where it was successfully tested ; by default, as many threads are started as the number of CPUs haproxy is allowed to run on. This removes a lot of configuration burden in VMs and containers - automatic maxconn setting for the process and the frontends, directly based on the number of available FDs (easier configuration in containers and with systemd) - logging to stdout for use in containers and systemd (already in 1.9). Logs can now provide micro-second resolution for some events - peers now support SSL, declaration of multiple stick-tables directly in the peers section, and synchronization of server names, not just IDs - In master-worker mode, the master process now exposes its own CLI and can communicate with all other processes (including the stopping ones), even allowing to connect to their CLI and check their state. It is also possible to start some sidecar programs and monitor them from the master, and the master can automatically kill old processes that survived too many reloads - the incoming connections are load-balanced between all threads depending on their load to minimize the processing time and maximize the capacity (already in 1.9) - the SPOE connection load-balancing was significantly improved in order to reduce high percentiles of SPOA response time (already in 1.9) - the "random" load balancing algorithm and a power-of-two-choices variant were introduced - statistics improvements with per-thread counters for certain things, and a prometheus exporter for all our statistics; - lots of debugging help, it's easier to produce a core dump, there are new commands on the CLI to control various things, there is a watchdog to fail cleanly when a thread deadlock or a spinning task are detected, so overall it should provide a better experience in field and less round trips between users and developers (hence less stress during an incident). - all 3 device detection engines are now compatible with multi-threading and can be build-tested without any external dependencies - "do-resolve" http-request action to perform a DNS resolution on any, sample, and resolvers now support relying on /etc/resolv.conf to match the local resolver - log sampling and balancing : it's now possible to send 1 log every 10 to a server, or to spread the logging load over multiple log servers; - a new SPOA agent (spoa_server) allows to interface haproxy with Python and Lua programs - support for Solaris' event ports (equivalent of kqueue or epoll) which will significantly improve the performance there when dealing with numerous connections - some warnings are now reported for some deprecated options that will be removed in 2.1. Since 2.0 is long term supported, there's no emergency to convert them, however if you see these warnings, you need to understand that you're among their extremely rare users and just because of this you may be taking risks by keeping them - A new SOCKS4 server-side layer was provided ; it allows outgoing connections to be forwarded through a SOCKS4 proxy (such as ssh -D). - priority- and latency- aware server queues : it is possible now to assign priorities to certain requests and/or to give them a time bonus or penalty to refine control of the traffic and be able to engage on SLAs. - internally the architecture was significantly redesigned to allow to further improve performance and make it easier to implement protocols that span over multiple layers (such as QUIC). This work started in 1.9 and will continue with 2.1. - the I/O, applets and tasks now share the same multi-threaded scheduler, giving a much better responsiveness and fairness between all tasks as is visible with the CLI which always responds instantly even under extreme loads (started in 1.9) - the internal buffers were redesigned to ease zero-copy operations, so that it is possible to sustain a high bandwidth even when forwarding HTTP/1 to/from HTTP/2 (already in 1.9) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2556=1 Package List: - openSUSE Leap 15.1 (x86_64): haproxy-2.0.5+git0.d905f49a-lp151.2.3.1 haproxy-debuginfo-2.0.5+git0.d905f49a-lp151.2.3.1 haproxy-debugsource-2.0.5+git0.d905f49a-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-14241.html https://bugzilla.suse.com/1142529 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2550-1: moderate: Security update for ncurses
by opensuse-security＠opensuse.org 23 Nov '19

23 Nov '19

openSUSE Security Update: Security update for ncurses ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2550-1 Rating: moderate References: #1103320 #1154036 #1154037 Cross-References: CVE-2019-17594 CVE-2019-17595 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for ncurses fixes the following issues: Security issues fixed: - CVE-2019-17594: Fixed a heap-based buffer over-read in the _nc_find_entry function (bsc#1154036). - CVE-2019-17595: Fixed a heap-based buffer over-read in the fmt_entry function (bsc#1154037). Non-security issue fixed: - Removed screen.xterm from terminfo database (bsc#1103320). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2550=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libncurses5-6.1-lp150.9.1 libncurses5-debuginfo-6.1-lp150.9.1 libncurses6-6.1-lp150.9.1 libncurses6-debuginfo-6.1-lp150.9.1 ncurses-debugsource-6.1-lp150.9.1 ncurses-devel-6.1-lp150.9.1 ncurses-devel-debuginfo-6.1-lp150.9.1 ncurses-utils-6.1-lp150.9.1 ncurses-utils-debuginfo-6.1-lp150.9.1 ncurses5-devel-6.1-lp150.9.1 tack-6.1-lp150.9.1 tack-debuginfo-6.1-lp150.9.1 terminfo-6.1-lp150.9.1 terminfo-base-6.1-lp150.9.1 terminfo-iterm-6.1-lp150.9.1 terminfo-screen-6.1-lp150.9.1 - openSUSE Leap 15.0 (x86_64): libncurses5-32bit-6.1-lp150.9.1 libncurses5-32bit-debuginfo-6.1-lp150.9.1 libncurses6-32bit-6.1-lp150.9.1 libncurses6-32bit-debuginfo-6.1-lp150.9.1 ncurses-devel-32bit-6.1-lp150.9.1 ncurses-devel-32bit-debuginfo-6.1-lp150.9.1 ncurses5-devel-32bit-6.1-lp150.9.1 References: https://www.suse.com/security/cve/CVE-2019-17594.html https://www.suse.com/security/cve/CVE-2019-17595.html https://bugzilla.suse.com/1103320 https://bugzilla.suse.com/1154036 https://bugzilla.suse.com/1154037 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2555-1: moderate: Security update for haproxy
by opensuse-security＠opensuse.org 23 Nov '19

23 Nov '19

openSUSE Security Update: Security update for haproxy ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2555-1 Rating: moderate References: #1142529 Cross-References: CVE-2019-14241 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for haproxy to version 2.0.5+git0.d905f49a fixes the following issues: Security issue fixed: - CVE-2019-14241: Fixed a cookie memory corruption problem. (bsc#1142529) The update to 2.0.5 brings lots of features and bugfixes: - new internal native HTTP representation called HTX, was already in 1.9 and is now enabled by default in 2.0 - end-to-end HTTP/2 support including trailers and continuation frames, as needed for gRPC ; HTTP/2 may also be upgraded from HTTP/1.1 using the H2 preface; - server connection pooling and more advanced reuse, with ALPN protocol negotiation (already in 1.9) - layer 7 retries, allowing to use 0-RTT and TCP Fast Open to the servers as well as on the frontend - much more scalable multi-threading, which is even enabled by default on platforms where it was successfully tested ; by default, as many threads are started as the number of CPUs haproxy is allowed to run on. This removes a lot of configuration burden in VMs and containers - automatic maxconn setting for the process and the frontends, directly based on the number of available FDs (easier configuration in containers and with systemd) - logging to stdout for use in containers and systemd (already in 1.9). Logs can now provide micro-second resolution for some events - peers now support SSL, declaration of multiple stick-tables directly in the peers section, and synchronization of server names, not just IDs - In master-worker mode, the master process now exposes its own CLI and can communicate with all other processes (including the stopping ones), even allowing to connect to their CLI and check their state. It is also possible to start some sidecar programs and monitor them from the master, and the master can automatically kill old processes that survived too many reloads - the incoming connections are load-balanced between all threads depending on their load to minimize the processing time and maximize the capacity (already in 1.9) - the SPOE connection load-balancing was significantly improved in order to reduce high percentiles of SPOA response time (already in 1.9) - the "random" load balancing algorithm and a power-of-two-choices variant were introduced - statistics improvements with per-thread counters for certain things, and a prometheus exporter for all our statistics; - lots of debugging help, it's easier to produce a core dump, there are new commands on the CLI to control various things, there is a watchdog to fail cleanly when a thread deadlock or a spinning task are detected, so overall it should provide a better experience in field and less round trips between users and developers (hence less stress during an incident). - all 3 device detection engines are now compatible with multi-threading and can be build-tested without any external dependencies - "do-resolve" http-request action to perform a DNS resolution on any, sample, and resolvers now support relying on /etc/resolv.conf to match the local resolver - log sampling and balancing : it's now possible to send 1 log every 10 to a server, or to spread the logging load over multiple log servers; - a new SPOA agent (spoa_server) allows to interface haproxy with Python and Lua programs - support for Solaris' event ports (equivalent of kqueue or epoll) which will significantly improve the performance there when dealing with numerous connections - some warnings are now reported for some deprecated options that will be removed in 2.1. Since 2.0 is long term supported, there's no emergency to convert them, however if you see these warnings, you need to understand that you're among their extremely rare users and just because of this you may be taking risks by keeping them - A new SOCKS4 server-side layer was provided ; it allows outgoing connections to be forwarded through a SOCKS4 proxy (such as ssh -D). - priority- and latency- aware server queues : it is possible now to assign priorities to certain requests and/or to give them a time bonus or penalty to refine control of the traffic and be able to engage on SLAs. - internally the architecture was significantly redesigned to allow to further improve performance and make it easier to implement protocols that span over multiple layers (such as QUIC). This work started in 1.9 and will continue with 2.1. - the I/O, applets and tasks now share the same multi-threaded scheduler, giving a much better responsiveness and fairness between all tasks as is visible with the CLI which always responds instantly even under extreme loads (started in 1.9) - the internal buffers were redesigned to ease zero-copy operations, so that it is possible to sustain a high bandwidth even when forwarding HTTP/1 to/from HTTP/2 (already in 1.9) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2555=1 Package List: - openSUSE Leap 15.0 (x86_64): haproxy-2.0.5+git0.d905f49a-lp150.2.13.1 haproxy-debuginfo-2.0.5+git0.d905f49a-lp150.2.13.1 haproxy-debugsource-2.0.5+git0.d905f49a-lp150.2.13.1 References: https://www.suse.com/security/cve/CVE-2019-14241.html https://bugzilla.suse.com/1142529 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2551-1: moderate: Security update for ncurses
by opensuse-security＠opensuse.org 23 Nov '19

23 Nov '19

openSUSE Security Update: Security update for ncurses ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2551-1 Rating: moderate References: #1103320 #1154036 #1154037 Cross-References: CVE-2019-17594 CVE-2019-17595 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for ncurses fixes the following issues: Security issues fixed: - CVE-2019-17594: Fixed a heap-based buffer over-read in the _nc_find_entry function (bsc#1154036). - CVE-2019-17595: Fixed a heap-based buffer over-read in the fmt_entry function (bsc#1154037). Non-security issue fixed: - Removed screen.xterm from terminfo database (bsc#1103320). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2551=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libncurses5-6.1-lp151.6.3.1 libncurses5-debuginfo-6.1-lp151.6.3.1 libncurses6-6.1-lp151.6.3.1 libncurses6-debuginfo-6.1-lp151.6.3.1 ncurses-debugsource-6.1-lp151.6.3.1 ncurses-devel-6.1-lp151.6.3.1 ncurses-devel-debuginfo-6.1-lp151.6.3.1 ncurses-utils-6.1-lp151.6.3.1 ncurses-utils-debuginfo-6.1-lp151.6.3.1 ncurses5-devel-6.1-lp151.6.3.1 tack-6.1-lp151.6.3.1 tack-debuginfo-6.1-lp151.6.3.1 terminfo-6.1-lp151.6.3.1 terminfo-base-6.1-lp151.6.3.1 terminfo-iterm-6.1-lp151.6.3.1 terminfo-screen-6.1-lp151.6.3.1 - openSUSE Leap 15.1 (x86_64): libncurses5-32bit-6.1-lp151.6.3.1 libncurses5-32bit-debuginfo-6.1-lp151.6.3.1 libncurses6-32bit-6.1-lp151.6.3.1 libncurses6-32bit-debuginfo-6.1-lp151.6.3.1 ncurses-devel-32bit-6.1-lp151.6.3.1 ncurses-devel-32bit-debuginfo-6.1-lp151.6.3.1 ncurses5-devel-32bit-6.1-lp151.6.3.1 References: https://www.suse.com/security/cve/CVE-2019-17594.html https://www.suse.com/security/cve/CVE-2019-17595.html https://bugzilla.suse.com/1103320 https://bugzilla.suse.com/1154036 https://bugzilla.suse.com/1154037 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2544-1: important: Security update for chromium
by opensuse-security＠opensuse.org 22 Nov '19

22 Nov '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2544-1 Rating: important References: #1157269 Cross-References: CVE-2019-13723 CVE-2019-13724 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for chromium to version 78.0.3904.108 fixes the following issues: - Chromium was updated to 78.0.3904.108 (boo#1157269) Security issues fixed: - CVE-2019-13723: Fixed a use-after-free in Bluetooth - CVE-2019-13724: Fixed an out of bounds access in Bluetooth Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2544=1 Package List: - openSUSE Leap 15.1 (x86_64): chromedriver-78.0.3904.108-lp151.2.48.1 chromedriver-debuginfo-78.0.3904.108-lp151.2.48.1 chromium-78.0.3904.108-lp151.2.48.1 chromium-debuginfo-78.0.3904.108-lp151.2.48.1 chromium-debugsource-78.0.3904.108-lp151.2.48.1 References: https://www.suse.com/security/cve/CVE-2019-13723.html https://www.suse.com/security/cve/CVE-2019-13724.html https://bugzilla.suse.com/1157269 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2545-1: important: Security update for chromium
by opensuse-security＠opensuse.org 22 Nov '19

22 Nov '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2545-1 Rating: important References: #1157269 Cross-References: CVE-2019-13723 CVE-2019-13724 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for chromium to version 78.0.3904.108 fixes the following issues: - Chromium was updated to 78.0.3904.108 (boo#1157269) Security issues fixed: - CVE-2019-13723: Fixed a use-after-free in Bluetooth - CVE-2019-13724: Fixed an out of bounds access in Bluetooth Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2545=1 Package List: - openSUSE Leap 15.0 (x86_64): chromedriver-78.0.3904.108-lp150.257.1 chromedriver-debuginfo-78.0.3904.108-lp150.257.1 chromium-78.0.3904.108-lp150.257.1 chromium-debuginfo-78.0.3904.108-lp150.257.1 chromium-debugsource-78.0.3904.108-lp150.257.1 References: https://www.suse.com/security/cve/CVE-2019-13723.html https://www.suse.com/security/cve/CVE-2019-13724.html https://bugzilla.suse.com/1157269 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2541-1: important: Security update for squid
by opensuse-security＠opensuse.org 21 Nov '19

21 Nov '19

openSUSE Security Update: Security update for squid ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2541-1 Rating: important References: #1133089 #1140738 #1141329 #1141330 #1141332 #1141442 #1156323 #1156324 #1156326 #1156328 #1156329 Cross-References: CVE-2019-12523 CVE-2019-12525 CVE-2019-12526 CVE-2019-12527 CVE-2019-12529 CVE-2019-12854 CVE-2019-13345 CVE-2019-18676 CVE-2019-18677 CVE-2019-18678 CVE-2019-18679 CVE-2019-3688 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: This update for squid to version 4.9 fixes the following issues: Security issues fixed: - CVE-2019-13345: Fixed multiple cross-site scripting vulnerabilities in cachemgr.cgi (bsc#1140738). - CVE-2019-12526: Fixed potential remote code execution during URN processing (bsc#1156326). - CVE-2019-12523,CVE-2019-18676: Fixed multiple improper validations in URI processing (bsc#1156329). - CVE-2019-18677: Fixed Cross-Site Request Forgery in HTTP Request processing (bsc#1156328). - CVE-2019-18678: Fixed incorrect message parsing which could have led to HTTP request splitting issue (bsc#1156323). - CVE-2019-18679: Fixed information disclosure when processing HTTP Digest Authentication (bsc#1156324). Other issues addressed: * Fixed DNS failures when peer name was configured with any upper case characters * Fixed several rock cache_dir corruption issues This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2541=1 Package List: - openSUSE Leap 15.1 (x86_64): squid-4.9-lp151.2.7.1 squid-debuginfo-4.9-lp151.2.7.1 squid-debugsource-4.9-lp151.2.7.1 References: https://www.suse.com/security/cve/CVE-2019-12523.html https://www.suse.com/security/cve/CVE-2019-12525.html https://www.suse.com/security/cve/CVE-2019-12526.html https://www.suse.com/security/cve/CVE-2019-12527.html https://www.suse.com/security/cve/CVE-2019-12529.html https://www.suse.com/security/cve/CVE-2019-12854.html https://www.suse.com/security/cve/CVE-2019-13345.html https://www.suse.com/security/cve/CVE-2019-18676.html https://www.suse.com/security/cve/CVE-2019-18677.html https://www.suse.com/security/cve/CVE-2019-18678.html https://www.suse.com/security/cve/CVE-2019-18679.html https://www.suse.com/security/cve/CVE-2019-3688.html https://bugzilla.suse.com/1133089 https://bugzilla.suse.com/1140738 https://bugzilla.suse.com/1141329 https://bugzilla.suse.com/1141330 https://bugzilla.suse.com/1141332 https://bugzilla.suse.com/1141442 https://bugzilla.suse.com/1156323 https://bugzilla.suse.com/1156324 https://bugzilla.suse.com/1156326 https://bugzilla.suse.com/1156328 https://bugzilla.suse.com/1156329 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2538-1: important: Security update for chromium
by opensuse-security＠opensuse.org 21 Nov '19

21 Nov '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2538-1 Rating: important References: #1157269 Cross-References: CVE-2019-13723 CVE-2019-13724 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for chromium to version 78.0.3904.108 fixes the following issues: - Chromium was updated to 78.0.3904.108 (boo#1157269) Security issues fixed: - CVE-2019-13723: Fixed a use-after-free in Bluetooth - CVE-2019-13724: Fixed an out of bounds access in Bluetooth Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-2538=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 x86_64): chromedriver-78.0.3904.108-16.1 chromium-78.0.3904.108-16.1 References: https://www.suse.com/security/cve/CVE-2019-13723.html https://www.suse.com/security/cve/CVE-2019-13724.html https://bugzilla.suse.com/1157269 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2539-1: important: Security update for chromium
by opensuse-security＠opensuse.org 21 Nov '19

21 Nov '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2539-1 Rating: important References: #1157269 Cross-References: CVE-2019-13723 CVE-2019-13724 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for chromium to version 78.0.3904.108 fixes the following issues: - Chromium was updated to 78.0.3904.108 (boo#1157269) Security issues fixed: - CVE-2019-13723: Fixed a use-after-free in Bluetooth - CVE-2019-13724: Fixed an out of bounds access in Bluetooth Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2539=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-78.0.3904.108-bp151.3.31.1 chromium-78.0.3904.108-bp151.3.31.1 References: https://www.suse.com/security/cve/CVE-2019-13723.html https://www.suse.com/security/cve/CVE-2019-13724.html https://bugzilla.suse.com/1157269 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2540-1: important: Security update for squid
by opensuse-security＠opensuse.org 21 Nov '19

21 Nov '19

openSUSE Security Update: Security update for squid ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2540-1 Rating: important References: #1133089 #1140738 #1141329 #1141330 #1141332 #1141442 #1156323 #1156324 #1156326 #1156328 #1156329 Cross-References: CVE-2019-12523 CVE-2019-12525 CVE-2019-12526 CVE-2019-12527 CVE-2019-12529 CVE-2019-12854 CVE-2019-13345 CVE-2019-18676 CVE-2019-18677 CVE-2019-18678 CVE-2019-18679 CVE-2019-3688 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: This update for squid to version 4.9 fixes the following issues: Security issues fixed: - CVE-2019-13345: Fixed multiple cross-site scripting vulnerabilities in cachemgr.cgi (bsc#1140738). - CVE-2019-12526: Fixed potential remote code execution during URN processing (bsc#1156326). - CVE-2019-12523,CVE-2019-18676: Fixed multiple improper validations in URI processing (bsc#1156329). - CVE-2019-18677: Fixed Cross-Site Request Forgery in HTTP Request processing (bsc#1156328). - CVE-2019-18678: Fixed incorrect message parsing which could have led to HTTP request splitting issue (bsc#1156323). - CVE-2019-18679: Fixed information disclosure when processing HTTP Digest Authentication (bsc#1156324). Other issues addressed: * Fixed DNS failures when peer name was configured with any upper case characters * Fixed several rock cache_dir corruption issues This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2540=1 Package List: - openSUSE Leap 15.0 (x86_64): squid-4.9-lp150.13.1 squid-debuginfo-4.9-lp150.13.1 squid-debugsource-4.9-lp150.13.1 References: https://www.suse.com/security/cve/CVE-2019-12523.html https://www.suse.com/security/cve/CVE-2019-12525.html https://www.suse.com/security/cve/CVE-2019-12526.html https://www.suse.com/security/cve/CVE-2019-12527.html https://www.suse.com/security/cve/CVE-2019-12529.html https://www.suse.com/security/cve/CVE-2019-12854.html https://www.suse.com/security/cve/CVE-2019-13345.html https://www.suse.com/security/cve/CVE-2019-18676.html https://www.suse.com/security/cve/CVE-2019-18677.html https://www.suse.com/security/cve/CVE-2019-18678.html https://www.suse.com/security/cve/CVE-2019-18679.html https://www.suse.com/security/cve/CVE-2019-3688.html https://bugzilla.suse.com/1133089 https://bugzilla.suse.com/1140738 https://bugzilla.suse.com/1141329 https://bugzilla.suse.com/1141330 https://bugzilla.suse.com/1141332 https://bugzilla.suse.com/1141442 https://bugzilla.suse.com/1156323 https://bugzilla.suse.com/1156324 https://bugzilla.suse.com/1156326 https://bugzilla.suse.com/1156328 https://bugzilla.suse.com/1156329 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2537-1: important: Security update for chromium
by opensuse-security＠opensuse.org 21 Nov '19

21 Nov '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2537-1 Rating: important References: #1157269 Cross-References: CVE-2019-13723 CVE-2019-13724 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for chromium to version 78.0.3904.108 fixes the following issues: - Chromium was updated to 78.0.3904.108 (boo#1157269) Security issues fixed: - CVE-2019-13723: Fixed a use-after-free in Bluetooth - CVE-2019-13724: Fixed an out of bounds access in Bluetooth Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2537=1 Package List: - openSUSE Backports SLE-15 (aarch64 x86_64): chromedriver-78.0.3904.108-bp150.249.1 chromium-78.0.3904.108-bp150.249.1 References: https://www.suse.com/security/cve/CVE-2019-13723.html https://www.suse.com/security/cve/CVE-2019-13724.html https://bugzilla.suse.com/1157269 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2536-1: moderate: Security update for slurm
by opensuse-security＠opensuse.org 20 Nov '19

20 Nov '19

openSUSE Security Update: Security update for slurm ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2536-1 Rating: moderate References: #1140709 #1153095 #1153245 Cross-References: CVE-2019-12838 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for slurm fixes the following issues: Security issue fixed: - CVE-2019-12838: Fixed an SQL injection (bsc#1140709). Non-security issue fixed: - Added X11-forwarding (bsc#1153245). - Moved srun from 'slurm' to 'slurm-node': srun is required on the nodes as well so sbatch will work. 'slurm-node' is a requirement when 'slurm' is installed (bsc#1153095). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2536=1 Package List: - openSUSE Leap 15.0 (x86_64): libpmi0-17.11.13-lp150.5.24.1 libpmi0-debuginfo-17.11.13-lp150.5.24.1 libslurm32-17.11.13-lp150.5.24.1 libslurm32-debuginfo-17.11.13-lp150.5.24.1 perl-slurm-17.11.13-lp150.5.24.1 perl-slurm-debuginfo-17.11.13-lp150.5.24.1 slurm-17.11.13-lp150.5.24.1 slurm-auth-none-17.11.13-lp150.5.24.1 slurm-auth-none-debuginfo-17.11.13-lp150.5.24.1 slurm-config-17.11.13-lp150.5.24.1 slurm-debuginfo-17.11.13-lp150.5.24.1 slurm-debugsource-17.11.13-lp150.5.24.1 slurm-devel-17.11.13-lp150.5.24.1 slurm-doc-17.11.13-lp150.5.24.1 slurm-lua-17.11.13-lp150.5.24.1 slurm-lua-debuginfo-17.11.13-lp150.5.24.1 slurm-munge-17.11.13-lp150.5.24.1 slurm-munge-debuginfo-17.11.13-lp150.5.24.1 slurm-node-17.11.13-lp150.5.24.1 slurm-node-debuginfo-17.11.13-lp150.5.24.1 slurm-openlava-17.11.13-lp150.5.24.1 slurm-pam_slurm-17.11.13-lp150.5.24.1 slurm-pam_slurm-debuginfo-17.11.13-lp150.5.24.1 slurm-plugins-17.11.13-lp150.5.24.1 slurm-plugins-debuginfo-17.11.13-lp150.5.24.1 slurm-seff-17.11.13-lp150.5.24.1 slurm-sjstat-17.11.13-lp150.5.24.1 slurm-slurmdbd-17.11.13-lp150.5.24.1 slurm-slurmdbd-debuginfo-17.11.13-lp150.5.24.1 slurm-sql-17.11.13-lp150.5.24.1 slurm-sql-debuginfo-17.11.13-lp150.5.24.1 slurm-sview-17.11.13-lp150.5.24.1 slurm-sview-debuginfo-17.11.13-lp150.5.24.1 slurm-torque-17.11.13-lp150.5.24.1 slurm-torque-debuginfo-17.11.13-lp150.5.24.1 References: https://www.suse.com/security/cve/CVE-2019-12838.html https://bugzilla.suse.com/1140709 https://bugzilla.suse.com/1153095 https://bugzilla.suse.com/1153245 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2535-1: important: Security update for ghostscript
by opensuse-security＠opensuse.org 20 Nov '19

20 Nov '19

openSUSE Security Update: Security update for ghostscript ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2535-1 Rating: important References: #1156275 Cross-References: CVE-2019-14869 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ghostscript fixes the following issues: - CVE-2019-14869: Fixed a possible dSAFER escape which could have allowed an attacker to gain high privileges by a specially crafted Postscript code (bsc#1156275). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2535=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ghostscript-9.27-lp151.3.9.1 ghostscript-debuginfo-9.27-lp151.3.9.1 ghostscript-debugsource-9.27-lp151.3.9.1 ghostscript-devel-9.27-lp151.3.9.1 ghostscript-mini-9.27-lp151.3.9.1 ghostscript-mini-debuginfo-9.27-lp151.3.9.1 ghostscript-mini-debugsource-9.27-lp151.3.9.1 ghostscript-mini-devel-9.27-lp151.3.9.1 ghostscript-x11-9.27-lp151.3.9.1 ghostscript-x11-debuginfo-9.27-lp151.3.9.1 References: https://www.suse.com/security/cve/CVE-2019-14869.html https://bugzilla.suse.com/1156275 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2534-1: important: Security update for ghostscript
by opensuse-security＠opensuse.org 20 Nov '19

20 Nov '19

openSUSE Security Update: Security update for ghostscript ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2534-1 Rating: important References: #1156275 Cross-References: CVE-2019-14869 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ghostscript fixes the following issues: - CVE-2019-14869: Fixed a possible dSAFER escape which could have allowed an attacker to gain high privileges by a specially crafted Postscript code (bsc#1156275). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2534=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): ghostscript-9.27-lp150.2.26.1 ghostscript-debuginfo-9.27-lp150.2.26.1 ghostscript-debugsource-9.27-lp150.2.26.1 ghostscript-devel-9.27-lp150.2.26.1 ghostscript-mini-9.27-lp150.2.26.1 ghostscript-mini-debuginfo-9.27-lp150.2.26.1 ghostscript-mini-debugsource-9.27-lp150.2.26.1 ghostscript-mini-devel-9.27-lp150.2.26.1 ghostscript-x11-9.27-lp150.2.26.1 ghostscript-x11-debuginfo-9.27-lp150.2.26.1 References: https://www.suse.com/security/cve/CVE-2019-14869.html https://bugzilla.suse.com/1156275 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2530-1: important: Security update for libjpeg-turbo
by opensuse-security＠opensuse.org 19 Nov '19

19 Nov '19

openSUSE Security Update: Security update for libjpeg-turbo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2530-1 Rating: important References: #1156402 Cross-References: CVE-2019-2201 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libjpeg-turbo fixes the following issues: - CVE-2019-2201: Several integer overflow issues and subsequent segfaults occurred in libjpeg-turbo, when attempting to compress or decompress gigapixel images. [bsc#1156402] This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2530=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libjpeg-turbo-1.5.3-lp150.4.7.1 libjpeg-turbo-debuginfo-1.5.3-lp150.4.7.1 libjpeg-turbo-debugsource-1.5.3-lp150.4.7.1 libjpeg62-62.2.0-lp150.4.7.1 libjpeg62-debuginfo-62.2.0-lp150.4.7.1 libjpeg62-devel-62.2.0-lp150.4.7.1 libjpeg62-turbo-1.5.3-lp150.4.7.1 libjpeg62-turbo-debugsource-1.5.3-lp150.4.7.1 libjpeg8-8.1.2-lp150.4.7.1 libjpeg8-debuginfo-8.1.2-lp150.4.7.1 libjpeg8-devel-8.1.2-lp150.4.7.1 libturbojpeg0-8.1.2-lp150.4.7.1 libturbojpeg0-debuginfo-8.1.2-lp150.4.7.1 - openSUSE Leap 15.0 (x86_64): libjpeg62-32bit-62.2.0-lp150.4.7.1 libjpeg62-32bit-debuginfo-62.2.0-lp150.4.7.1 libjpeg62-devel-32bit-62.2.0-lp150.4.7.1 libjpeg8-32bit-8.1.2-lp150.4.7.1 libjpeg8-32bit-debuginfo-8.1.2-lp150.4.7.1 libjpeg8-devel-32bit-8.1.2-lp150.4.7.1 libturbojpeg0-32bit-8.1.2-lp150.4.7.1 libturbojpeg0-32bit-debuginfo-8.1.2-lp150.4.7.1 References: https://www.suse.com/security/cve/CVE-2019-2201.html https://bugzilla.suse.com/1156402 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2529-1: important: Security update for libjpeg-turbo
by opensuse-security＠opensuse.org 19 Nov '19

19 Nov '19

openSUSE Security Update: Security update for libjpeg-turbo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2529-1 Rating: important References: #1156402 Cross-References: CVE-2019-2201 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libjpeg-turbo fixes the following issues: - CVE-2019-2201: Several integer overflow issues and subsequent segfaults occurred in libjpeg-turbo, when attempting to compress or decompress gigapixel images. [bsc#1156402] This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2529=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libjpeg-turbo-1.5.3-lp151.6.3.1 libjpeg-turbo-debuginfo-1.5.3-lp151.6.3.1 libjpeg-turbo-debugsource-1.5.3-lp151.6.3.1 libjpeg62-62.2.0-lp151.6.3.1 libjpeg62-debuginfo-62.2.0-lp151.6.3.1 libjpeg62-devel-62.2.0-lp151.6.3.1 libjpeg62-turbo-1.5.3-lp151.6.3.1 libjpeg62-turbo-debugsource-1.5.3-lp151.6.3.1 libjpeg8-8.1.2-lp151.6.3.1 libjpeg8-debuginfo-8.1.2-lp151.6.3.1 libjpeg8-devel-8.1.2-lp151.6.3.1 libturbojpeg0-8.1.2-lp151.6.3.1 libturbojpeg0-debuginfo-8.1.2-lp151.6.3.1 - openSUSE Leap 15.1 (x86_64): libjpeg62-32bit-62.2.0-lp151.6.3.1 libjpeg62-32bit-debuginfo-62.2.0-lp151.6.3.1 libjpeg62-devel-32bit-62.2.0-lp151.6.3.1 libjpeg8-32bit-8.1.2-lp151.6.3.1 libjpeg8-32bit-debuginfo-8.1.2-lp151.6.3.1 libjpeg8-devel-32bit-8.1.2-lp151.6.3.1 libturbojpeg0-32bit-8.1.2-lp151.6.3.1 libturbojpeg0-32bit-debuginfo-8.1.2-lp151.6.3.1 References: https://www.suse.com/security/cve/CVE-2019-2201.html https://bugzilla.suse.com/1156402 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2527-1: important: Security update for ucode-intel
by opensuse-security＠opensuse.org 18 Nov '19

18 Nov '19

openSUSE Security Update: Security update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2527-1 Rating: important References: #1139073 #1141035 #1155988 Cross-References: CVE-2019-11135 CVE-2019-11139 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for ucode-intel fixes the following issues: - Updated to 20191112 official security release (bsc#1155988) - Includes security fixes for: - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073) - CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2527=1 Package List: - openSUSE Leap 15.0 (x86_64): ucode-intel-20191112a-lp150.2.33.1 References: https://www.suse.com/security/cve/CVE-2019-11135.html https://www.suse.com/security/cve/CVE-2019-11139.html https://bugzilla.suse.com/1139073 https://bugzilla.suse.com/1141035 https://bugzilla.suse.com/1155988 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2528-1: important: Security update for ucode-intel
by opensuse-security＠opensuse.org 18 Nov '19

18 Nov '19

openSUSE Security Update: Security update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2528-1 Rating: important References: #1139073 #1141035 #1155988 Cross-References: CVE-2019-11135 CVE-2019-11139 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for ucode-intel fixes the following issues: - Updated to 20191112 official security release (bsc#1155988) - Includes security fixes for: - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073) - CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2528=1 Package List: - openSUSE Leap 15.1 (x86_64): ucode-intel-20191112a-lp151.2.12.1 References: https://www.suse.com/security/cve/CVE-2019-11135.html https://www.suse.com/security/cve/CVE-2019-11139.html https://bugzilla.suse.com/1139073 https://bugzilla.suse.com/1141035 https://bugzilla.suse.com/1155988 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2521-1: moderate: Security update for go1.12
by opensuse-security＠opensuse.org 17 Nov '19

17 Nov '19

openSUSE Security Update: Security update for go1.12 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2521-1 Rating: moderate References: #1141689 #1152082 #1154402 Cross-References: CVE-2019-16276 CVE-2019-17596 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for go1.12 fixes the following issues: Security issues fixed: - CVE-2019-16276: Fixed the handling of invalid HTTP headers, which had allowed request smuggling (bsc#1152082). - CVE-2019-17596: Fixed a panic in dsa.Verify caused by invalid public keys (bsc#1154402). Non-security issue fixed: - Go was updated to version 1.12.12 (bsc#1141689). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2521=1 Package List: - openSUSE Leap 15.0 (x86_64): go1.12-1.12.12-lp150.11.1 go1.12-doc-1.12.12-lp150.11.1 go1.12-race-1.12.12-lp150.11.1 References: https://www.suse.com/security/cve/CVE-2019-16276.html https://www.suse.com/security/cve/CVE-2019-17596.html https://bugzilla.suse.com/1141689 https://bugzilla.suse.com/1152082 https://bugzilla.suse.com/1154402 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2522-1: moderate: Security update for go1.12
by opensuse-security＠opensuse.org 17 Nov '19

17 Nov '19

openSUSE Security Update: Security update for go1.12 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2522-1 Rating: moderate References: #1141689 #1152082 #1154402 Cross-References: CVE-2019-16276 CVE-2019-17596 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for go1.12 fixes the following issues: Security issues fixed: - CVE-2019-16276: Fixed the handling of invalid HTTP headers, which had allowed request smuggling (bsc#1152082). - CVE-2019-17596: Fixed a panic in dsa.Verify caused by invalid public keys (bsc#1154402). Non-security issue fixed: - Go was updated to version 1.12.12 (bsc#1141689). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2522=1 Package List: - openSUSE Leap 15.1 (x86_64): go1.12-1.12.12-lp151.2.25.1 go1.12-doc-1.12.12-lp151.2.25.1 go1.12-race-1.12.12-lp151.2.25.1 References: https://www.suse.com/security/cve/CVE-2019-16276.html https://www.suse.com/security/cve/CVE-2019-17596.html https://bugzilla.suse.com/1141689 https://bugzilla.suse.com/1152082 https://bugzilla.suse.com/1154402 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2519-1: moderate: Security update for ImageMagick
by opensuse-security＠opensuse.org 16 Nov '19

16 Nov '19

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2519-1 Rating: moderate References: #1146065 #1146068 #1146211 #1146212 #1146213 #1151781 #1151782 #1151783 #1151784 #1151785 #1151786 Cross-References: CVE-2019-14980 CVE-2019-14981 CVE-2019-15139 CVE-2019-15140 CVE-2019-15141 CVE-2019-16708 CVE-2019-16709 CVE-2019-16710 CVE-2019-16711 CVE-2019-16712 CVE-2019-16713 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage (bsc#1146213). - CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser (bsc#1146212). - CVE-2019-15141: Fixed a divide-by-zero vulnerability in the MeanShiftImage function (bsc#1146211). - CVE-2019-14980: Fixed an application crash resulting from a heap-based buffer over-read in WriteTIFFImage (bsc#1146068). - CVE-2019-14981: Fixed a use after free in the UnmapBlob function (bsc#1146065). - CVE-2019-16708: Fixed a memory leak in magick/xwindow.c (bsc#1151781). - CVE-2019-16709: Fixed a memory leak in coders/dps.c (bsc#1151782). - CVE-2019-16710: Fixed a memory leak in coders/dot.c (bsc#1151783). - CVE-2019-16711: Fixed a memory leak in Huffman2DEncodeImage in coders/ps2.c (bsc#1151784). - CVE-2019-16712: Fixed a memory leak in Huffman2DEncodeImage in coders/ps3.c (bsc#1151785). - CVE-2019-16713: Fixed a memory leak in coders/dot.c (bsc#1151786). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2519=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): ImageMagick-7.0.7.34-lp150.2.41.1 ImageMagick-config-7-SUSE-7.0.7.34-lp150.2.41.1 ImageMagick-config-7-upstream-7.0.7.34-lp150.2.41.1 ImageMagick-debuginfo-7.0.7.34-lp150.2.41.1 ImageMagick-debugsource-7.0.7.34-lp150.2.41.1 ImageMagick-devel-7.0.7.34-lp150.2.41.1 ImageMagick-extra-7.0.7.34-lp150.2.41.1 ImageMagick-extra-debuginfo-7.0.7.34-lp150.2.41.1 libMagick++-7_Q16HDRI4-7.0.7.34-lp150.2.41.1 libMagick++-7_Q16HDRI4-debuginfo-7.0.7.34-lp150.2.41.1 libMagick++-devel-7.0.7.34-lp150.2.41.1 libMagickCore-7_Q16HDRI6-7.0.7.34-lp150.2.41.1 libMagickCore-7_Q16HDRI6-debuginfo-7.0.7.34-lp150.2.41.1 libMagickWand-7_Q16HDRI6-7.0.7.34-lp150.2.41.1 libMagickWand-7_Q16HDRI6-debuginfo-7.0.7.34-lp150.2.41.1 perl-PerlMagick-7.0.7.34-lp150.2.41.1 perl-PerlMagick-debuginfo-7.0.7.34-lp150.2.41.1 - openSUSE Leap 15.0 (noarch): ImageMagick-doc-7.0.7.34-lp150.2.41.1 - openSUSE Leap 15.0 (x86_64): ImageMagick-devel-32bit-7.0.7.34-lp150.2.41.1 libMagick++-7_Q16HDRI4-32bit-7.0.7.34-lp150.2.41.1 libMagick++-7_Q16HDRI4-32bit-debuginfo-7.0.7.34-lp150.2.41.1 libMagick++-devel-32bit-7.0.7.34-lp150.2.41.1 libMagickCore-7_Q16HDRI6-32bit-7.0.7.34-lp150.2.41.1 libMagickCore-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp150.2.41.1 libMagickWand-7_Q16HDRI6-32bit-7.0.7.34-lp150.2.41.1 libMagickWand-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp150.2.41.1 References: https://www.suse.com/security/cve/CVE-2019-14980.html https://www.suse.com/security/cve/CVE-2019-14981.html https://www.suse.com/security/cve/CVE-2019-15139.html https://www.suse.com/security/cve/CVE-2019-15140.html https://www.suse.com/security/cve/CVE-2019-15141.html https://www.suse.com/security/cve/CVE-2019-16708.html https://www.suse.com/security/cve/CVE-2019-16709.html https://www.suse.com/security/cve/CVE-2019-16710.html https://www.suse.com/security/cve/CVE-2019-16711.html https://www.suse.com/security/cve/CVE-2019-16712.html https://www.suse.com/security/cve/CVE-2019-16713.html https://bugzilla.suse.com/1146065 https://bugzilla.suse.com/1146068 https://bugzilla.suse.com/1146211 https://bugzilla.suse.com/1146212 https://bugzilla.suse.com/1146213 https://bugzilla.suse.com/1151781 https://bugzilla.suse.com/1151782 https://bugzilla.suse.com/1151783 https://bugzilla.suse.com/1151784 https://bugzilla.suse.com/1151785 https://bugzilla.suse.com/1151786 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2514-1: moderate: Security update for libtomcrypt
by opensuse-security＠opensuse.org 15 Nov '19

15 Nov '19

openSUSE Security Update: Security update for libtomcrypt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2514-1 Rating: moderate References: #1153433 Cross-References: CVE-2019-17362 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libtomcrypt fixes the following issue: CVE-2019-17362: Fixed an improper detection of invalid UTF-8 sequences that could have led to DoS or information disclosure via crafted DER-encoded data (bsc#1153433). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2514=1 Package List: - openSUSE Leap 15.1 (x86_64): libtomcrypt-debugsource-1.17-lp151.3.3.1 libtomcrypt-devel-1.17-lp151.3.3.1 libtomcrypt-examples-1.17-lp151.3.3.1 libtomcrypt0-1.17-lp151.3.3.1 libtomcrypt0-debuginfo-1.17-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-17362.html https://bugzilla.suse.com/1153433 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2515-1: moderate: Security update for ImageMagick
by opensuse-security＠opensuse.org 15 Nov '19

15 Nov '19

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2515-1 Rating: moderate References: #1146065 #1146068 #1146211 #1146212 #1146213 #1151781 #1151782 #1151783 #1151784 #1151785 #1151786 Cross-References: CVE-2019-14980 CVE-2019-14981 CVE-2019-15139 CVE-2019-15140 CVE-2019-15141 CVE-2019-16708 CVE-2019-16709 CVE-2019-16710 CVE-2019-16711 CVE-2019-16712 CVE-2019-16713 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage (bsc#1146213). - CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser (bsc#1146212). - CVE-2019-15141: Fixed a divide-by-zero vulnerability in the MeanShiftImage function (bsc#1146211). - CVE-2019-14980: Fixed an application crash resulting from a heap-based buffer over-read in WriteTIFFImage (bsc#1146068). - CVE-2019-14981: Fixed a use after free in the UnmapBlob function (bsc#1146065). - CVE-2019-16708: Fixed a memory leak in magick/xwindow.c (bsc#1151781). - CVE-2019-16709: Fixed a memory leak in coders/dps.c (bsc#1151782). - CVE-2019-16710: Fixed a memory leak in coders/dot.c (bsc#1151783). - CVE-2019-16711: Fixed a memory leak in Huffman2DEncodeImage in coders/ps2.c (bsc#1151784). - CVE-2019-16712: Fixed a memory leak in Huffman2DEncodeImage in coders/ps3.c (bsc#1151785). - CVE-2019-16713: Fixed a memory leak in coders/dot.c (bsc#1151786). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2515=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ImageMagick-7.0.7.34-lp151.7.12.1 ImageMagick-config-7-SUSE-7.0.7.34-lp151.7.12.1 ImageMagick-config-7-upstream-7.0.7.34-lp151.7.12.1 ImageMagick-debuginfo-7.0.7.34-lp151.7.12.1 ImageMagick-debugsource-7.0.7.34-lp151.7.12.1 ImageMagick-devel-7.0.7.34-lp151.7.12.1 ImageMagick-extra-7.0.7.34-lp151.7.12.1 ImageMagick-extra-debuginfo-7.0.7.34-lp151.7.12.1 libMagick++-7_Q16HDRI4-7.0.7.34-lp151.7.12.1 libMagick++-7_Q16HDRI4-debuginfo-7.0.7.34-lp151.7.12.1 libMagick++-devel-7.0.7.34-lp151.7.12.1 libMagickCore-7_Q16HDRI6-7.0.7.34-lp151.7.12.1 libMagickCore-7_Q16HDRI6-debuginfo-7.0.7.34-lp151.7.12.1 libMagickWand-7_Q16HDRI6-7.0.7.34-lp151.7.12.1 libMagickWand-7_Q16HDRI6-debuginfo-7.0.7.34-lp151.7.12.1 perl-PerlMagick-7.0.7.34-lp151.7.12.1 perl-PerlMagick-debuginfo-7.0.7.34-lp151.7.12.1 - openSUSE Leap 15.1 (noarch): ImageMagick-doc-7.0.7.34-lp151.7.12.1 - openSUSE Leap 15.1 (x86_64): ImageMagick-devel-32bit-7.0.7.34-lp151.7.12.1 libMagick++-7_Q16HDRI4-32bit-7.0.7.34-lp151.7.12.1 libMagick++-7_Q16HDRI4-32bit-debuginfo-7.0.7.34-lp151.7.12.1 libMagick++-devel-32bit-7.0.7.34-lp151.7.12.1 libMagickCore-7_Q16HDRI6-32bit-7.0.7.34-lp151.7.12.1 libMagickCore-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp151.7.12.1 libMagickWand-7_Q16HDRI6-32bit-7.0.7.34-lp151.7.12.1 libMagickWand-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp151.7.12.1 References: https://www.suse.com/security/cve/CVE-2019-14980.html https://www.suse.com/security/cve/CVE-2019-14981.html https://www.suse.com/security/cve/CVE-2019-15139.html https://www.suse.com/security/cve/CVE-2019-15140.html https://www.suse.com/security/cve/CVE-2019-15141.html https://www.suse.com/security/cve/CVE-2019-16708.html https://www.suse.com/security/cve/CVE-2019-16709.html https://www.suse.com/security/cve/CVE-2019-16710.html https://www.suse.com/security/cve/CVE-2019-16711.html https://www.suse.com/security/cve/CVE-2019-16712.html https://www.suse.com/security/cve/CVE-2019-16713.html https://bugzilla.suse.com/1146065 https://bugzilla.suse.com/1146068 https://bugzilla.suse.com/1146211 https://bugzilla.suse.com/1146212 https://bugzilla.suse.com/1146213 https://bugzilla.suse.com/1151781 https://bugzilla.suse.com/1151782 https://bugzilla.suse.com/1151783 https://bugzilla.suse.com/1151784 https://bugzilla.suse.com/1151785 https://bugzilla.suse.com/1151786 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2507-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 14 Nov '19

14 Nov '19

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2507-1 Rating: important References: #1048942 #1051510 #1082635 #1090631 #1096254 #1111666 #1117665 #1119461 #1119465 #1123034 #1135966 #1135967 #1138190 #1139073 #1140090 #1143706 #1144903 #1149119 #1150466 #1152665 #1152696 #1152697 #1152782 #1153681 #1154124 #1154526 #1154858 #1154905 #1154956 #1155021 #1155061 #1155671 #1155692 #1155836 #1155982 #1156187 #1156429 Cross-References: CVE-2018-12207 CVE-2019-0154 CVE-2019-0155 CVE-2019-10220 CVE-2019-11135 CVE-2019-16231 CVE-2019-17055 CVE-2019-18805 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves 8 vulnerabilities and has 29 fixes is now available. Description: The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-0154: An unprotected read access to i915 registers has been fixed that could have been abused to facilitate a local denial-of-service attack. (bsc#1135966) - CVE-2019-0155: A privilege escalation vulnerability has been fixed in the i915 module that allowed batch buffers from user mode to gain super user privileges. (bsc#1135967) - CVE-2019-16231: drivers/net/fjes/fjes_main.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150466). - CVE-2019-18805: There was a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6 (bnc#1156187). - CVE-2019-17055: base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module did not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21 (bnc#1152782). - CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with Transactional Memory support could be used to facilitate sidechannel information leaks out of microarchitectural buffers, similar to the previously described "Microarchitectural Data Sampling" attack. The Linux kernel was supplemented with the option to disable TSX operation altogether (requiring CPU Microcode updates on older systems) and better flushing of microarchitectural buffers (VERW). The set of options available is described in our TID at https://www.suse.com/support/kb/doc/?id=7024251 - CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core to be non-functional. The Linux Kernel kvm hypervisor was adjusted to avoid page size changes in executable pages by splitting / merging huge pages into small pages as needed. More information can be found on https://www.suse.com/support/kb/doc/?id=7023735 - CVE-2019-10220: Added sanity checks on the pathnames passed to the user space. (bsc#1144903). The following non-security bugs were fixed: - ALSA: bebob: Fix prototype of helper function to return negative value (bsc#1051510). - ALSA: bebob: fix to detect configured source of sampling clock for Focusrite Saffire Pro i/o series (git-fixes). - ALSA: firewire-motu: add support for MOTU 4pre (bsc#1111666). - ALSA: hda/ca0132 - Fix possible workqueue stall (bsc#1155836). - ALSA: hda/realtek - Add support for ALC623 (bsc#1051510). - ALSA: hda/realtek - Fix 2 front mics of codec 0x623 (bsc#1051510). - ALSA: timer: Fix incorrectly assigned timer instance (git-fixes). - ALSA: timer: Fix mutex deadlock at releasing card (bsc#1051510). - ALSA: usb-audio: Add DSD support for Gustard U16/X26 USB Interface (bsc#1051510). - ALSA: usb-audio: Disable quirks for BOSS Katana amplifiers (bsc#1111666). - ALSA: usb-audio: Fix copy&paste error in the validator (bsc#1111666). - arm64: Add decoding macros for CP15_32 and CP15_64 traps (jsc#ECO-561). - arm64: Add part number for Neoverse N1 (jsc#ECO-561). - arm64: Add silicon-errata.txt entry for ARM erratum 1188873 (jsc#ECO-561). - arm64: Add support for new control bits CTR_EL0.DIC and CTR_EL0.IDC (jsc#ECO-561,jsc#SLE-10671). - arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (jsc#ECO-561). - arm64: arch_timer: Add workaround for ARM erratum 1188873 (jsc#ECO-561). - arm64: arch_timer: avoid unused function warning (jsc#ECO-561). - arm64: compat: Add CNTFRQ trap handler (jsc#ECO-561). - arm64: compat: Add CNTVCT trap handler (jsc#ECO-561). - arm64: compat: Add condition code checks and IT advance (jsc#ECO-561). - arm64: compat: Add cp15_32 and cp15_64 handler arrays (jsc#ECO-561). - arm64: compat: Add separate CP15 trapping hook (jsc#ECO-561). - arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (jsc#ECO-561,jsc#SLE-10671). - arm64: cpu_errata: Remove ARM64_MISMATCHED_CACHE_LINE_SIZE (jsc#ECO-561,jsc#SLE-10671). - arm64/cpufeature: Convert hook_lock to raw_spin_lock_t in cpu_enable_ssbs() (jsc#ECO-561). - arm64: cpufeature: ctr: Fix cpu capability check for late CPUs (jsc#ECO-561,jsc#SLE-10671). - arm64: cpufeature: Detect SSBS and advertise to userspace (jsc#ECO-561). - arm64: cpufeature: Fix handling of CTR_EL0.IDC field (jsc#ECO-561,jsc#SLE-10671). - arm64: cpufeature: Trap CTR_EL0 access only where it is necessary (jsc#ECO-561,jsc#SLE-10671). - arm64: cpu: Move errata and feature enable callbacks closer to callers (jsc#ECO-561). - arm64: entry: Allow handling of undefined instructions from EL1 (jsc#ECO-561). - arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (jsc#ECO-561,jsc#SLE-10671). - arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (jsc#ECO-561,jsc#SLE-10671). - arm64: Fix mismatched cache line size detection (jsc#ECO-561,jsc#SLE-10671). - arm64: Fix silly typo in comment (jsc#ECO-561). - arm64: fix SSBS sanitization (jsc#ECO-561). - arm64: force_signal_inject: WARN if called from kernel context (jsc#ECO-561). - arm64: Force SSBS on context switch (jsc#ECO-561). - arm64: Handle erratum 1418040 as a superset of erratum 1188873 (jsc#ECO-561). - arm64: Introduce sysreg_clear_set() (jsc#ECO-561). - arm64: kill change_cpacr() (jsc#ECO-561). - arm64: kill config_sctlr_el1() (jsc#ECO-561). - arm64: KVM: Add invalidate_icache_range helper (jsc#ECO-561,jsc#SLE-10671). - arm64: KVM: PTE/PMD S2 XN bit definition (jsc#ECO-561,jsc#SLE-10671). - arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (jsc#ECO-561). - arm64: move SCTLR_EL{1,2} assertions to <asm/sysreg.h> (jsc#ECO-561). - arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (jsc#ECO-561). - arm64: ssbd: Add support for PSTATE.SSBS rather than trapping to EL3 (jsc#ECO-561). - arm64: ssbd: Drop #ifdefs for PR_SPEC_STORE_BYPASS (jsc#ECO-561). - arm: KVM: Add optimized PIPT icache flushing (jsc#ECO-561,jsc#SLE-10671). - ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3 (bsc#1111666). - brcmfmac: sdio: Disable auto-tuning around commands expected to fail (bsc#1111666). - brcmfmac: sdio: Do not tune while the card is off (bsc#1111666). - can: dev: call netif_carrier_off() in register_candev() (bsc#1051510). - config: arm64: enable erratum 1418040 and 1542419 - dmaengine: bcm2835: Print error in case setting DMA mask fails (bsc#1051510). - dmaengine: imx-sdma: fix size check for sdma script_number (bsc#1051510). - drm/amd/display: fix odm combine pipe reset (bsc#1111666). - drm/amdgpu: fix memory leak (bsc#1111666). - drm/amdgpu/powerplay/vega10: allow undervolting in p7 (bsc#1111666). - drm/i915: Add gen9 BCS cmdparsing (bsc#1135967) - drm/i915: Add gen9 BCS cmdparsing (bsc#1135967) - drm/i915: Add support for mandatory cmdparsing (bsc#1135967) - drm/i915: Add support for mandatory cmdparsing (bsc#1135967) - drm/i915: Allow parsing of unsized batches (bsc#1135967) - drm/i915: Allow parsing of unsized batches (bsc#1135967) - drm/i915/cmdparser: Add support for backward jumps (bsc#1135967) - drm/i915/cmdparser: Add support for backward jumps (bsc#1135967) - drm/i915/cmdparser: Ignore Length operands during (bsc#1135967) - drm/i915/cmdparser: Ignore Length operands during command matching (bsc#1135967) - drm/i915/cmdparser: Use explicit goto for error paths (bsc#1135967) - drm/i915/cmdparser: Use explicit goto for error paths (bsc#1135967) - drm/i915/cml: Add second PCH ID for CMP (bsc#1111666). - drm/i915: Disable Secure Batches for gen6+ - drm/i915: Disable Secure Batches for gen6+ (bsc#1135967) - drm/i915/gen8+: Add RC6 CTX corruption WA (bsc#1135967) - drm/i915/gen8+: Add RC6 CTX corruption WA (bsc#1135967) - drm/i915/gtt: Add read only pages to gen8_pte_encode (bsc#1135967) - drm/i915/gtt: Disable read-only support under GVT (bsc#1135967) - drm/i915/gtt: Read-only pages for insert_entries on bdw (bsc#1135967) - drm/i915/ilk: Fix warning when reading emon_status with no output (bsc#1111666). - drm/i915: Lower RM timeout to avoid DSI hard hangs (bsc#1135967) - drm/i915: Lower RM timeout to avoid DSI hard hangs (bsc#1135967) - drm/i915: Prevent writing into a read-only object via a GGTT mmap (bsc#1135967) - drm/i915: Remove Master tables from cmdparser - drm/i915: Remove Master tables from cmdparser (bsc#1135967) - drm/i915: Rename gen7 cmdparser tables (bsc#1135967) - drm/i915: Rename gen7 cmdparser tables (bsc#1135967) - drm/i915: Support ro ppgtt mapped cmdparser shadow (bsc#1135967) - drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (bsc#1135967) - drm/msm/dpu: handle failures while initializing displays (bsc#1111666). - hyperv: set nvme msi interrupts to unmanaged (jsc#SLE-8953, jsc#SLE-9221, jsc#SLE-4941, bsc#1119461, bsc#1119465, bsc#1138190, bsc#1154905). - IB/core: Add mitigation for Spectre V1 (bsc#1155671) - integrity: prevent deadlock during digsig verification (bsc#1090631). - irqchip/gic-v3-its: Fix command queue pointer comparison bug (jsc#ECO-561). - irqchip/gic-v3-its: Fix LPI release for Multi-MSI devices (jsc#ECO-561). - irqchip/gic-v3-its: Fix misuse of GENMASK macro (jsc#ECO-561). - iwlwifi: do not panic in error path on non-msix systems (bsc#1155692). - iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666). - iwlwifi: exclude GEO SAR support for 3168 (git-fixes). - iwlwifi: fw: do not send GEO_TX_POWER_LIMIT command to FW version 36 (bsc#1111666). - kabi protect enum RDMA_DRIVER_EFA (jsc#SLE-4805) - kABI workaround for drm_vma_offset_node readonly field addition (bsc#1135967) - kABI workaround for mmc_host retune_crc_disable flag addition (bsc#1111666). - KVM: arm64: Set SCTLR_EL2.DSSBS if SSBD is forcefully disabled and !vhe (jsc#ECO-561). - KVM: arm/arm64: Clean dcache to PoC when changing PTE due to CoW (jsc#ECO-561,jsc#SLE-10671). - KVM: arm/arm64: Detangle kvm_mmu.h from kvm_hyp.h (jsc#ECO-561,jsc#SLE-10671). - KVM: arm/arm64: Drop vcpu parameter from guest cache maintenance operartions (jsc#ECO-561,jsc#SLE-10671). - KVM: arm/arm64: Limit icache invalidation to prefetch aborts (jsc#ECO-561,jsc#SLE-10671). - KVM: arm/arm64: Only clean the dcache on translation fault (jsc#ECO-561,jsc#SLE-10671). - KVM: arm/arm64: Preserve Exec permission across R/W permission faults (jsc#ECO-561,jsc#SLE-10671). - KVM: arm/arm64: Split dcache/icache flushing (jsc#ECO-561,jsc#SLE-10671). - KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (bsc#1117665). - md/raid0: avoid RAID0 data corruption due to layout confusion (bsc#1140090). - md/raid0: fix warning message for parameter default_layout (bsc#1140090). - mmc: core: Add sdio_retune_hold_now() and sdio_retune_release() (bsc#1111666). - mmc: core: API to temporarily disable retuning for SDIO CRC errors (bsc#1111666). - Move upstreamed CA0132 fix into sorted section - net: openvswitch: free vport unless register_netdevice() succeeds (git-fixes). - phylink: fix kernel-doc warnings (bsc#1111666). - power: supply: max14656: fix potential use-after-free (bsc#1051510). - RDMA/efa: Add Amazon EFA driver (jsc#SLE-4805) - RDMA/hns: Add reset process for function-clear (bsc#1155061). - RDMA/hns: Remove the some magic number (bsc#1155061). - RDMA/restrack: Track driver QP types in resource tracker (jsc#SLE-4805) - Revert "ALSA: hda: Flush interrupts on disabling" (bsc#1051510). - Revert synaptics-rmi4 patch due to regression (bsc#1155982) Also blacklisting it - rpm/kernel-subpackage-spec: Mention debuginfo in the subpackage description (bsc#1149119). - s390: add support for IBM z15 machines (bsc#1152696 LTC#181731). - s390/cpumsf: Check for CPU Measurement sampling (bsc#1153681 LTC#181855). - s390: fix setting of mio addressing control (bsc#1152665 LTC#181729). - s390/pci: add mio_enabled attribute (bsc#1152665 LTC#181729). - s390/pci: correctly handle MIO opt-out (bsc#1152665 LTC#181729). - s390/pci: deal with devices that have no support for MIO instructions (bsc#1152665 LTC#181729). - s390/pci: fix MSI message data (bsc#1152697 LTC#181730). - sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510). - sched/fair: Avoid divide by zero when rebalancing domains (bsc#1096254). - scsi: lpfc: Limit xri count for kdump environment (bsc#1154124). - scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Do command completion on abort timeout (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: do not use zero for FC4_PRIORITY_NVME (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Fix device connect issues in P2P configuration (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Fix memory leak when sending I/O fails (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Fix N2N link reset (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Fix N2N link up fail (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Fix partial flash write of MBI (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Fix SRB leak on switch command timeout (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Fix stale mem access on driver unload (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Fix unbound sleep in fcport delete path (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: fixup incorrect usage of host_byte (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Improve logging for scan thread (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Initialized mailbox to prevent driver load failure (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Optimize NPIV tear down process (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Remove an include directive (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: remove redundant assignment to pointer host (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Set remove flag for all VP (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Silence fwdump template message (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: stop timer in shutdown path (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Update driver version to 10.01.00.20-k (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Update driver version to 10.01.00.21-k (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: sd: Ignore a failure to sync cache due to lack of authorization (git-fixes). - scsi: storvsc: Add ability to change scsi queue depth (bsc#1155021). - scsi: zfcp: fix reaction on bit error threshold notification (bsc#1154956 LTC#182054). - serial: fix kernel-doc warning in comments (bsc#1051510). - serial: mctrl_gpio: Check for NULL pointer (bsc#1051510). - serial: uartlite: fix exit path null pointer (bsc#1051510). - staging: rtl8188eu: fix null dereference when kzalloc fails (bsc#1051510). - supporte.conf: add efivarfs to kernel-default-base (bsc#1154858). - tracing: Get trace_array reference for available_tracers files (bsc#1156429). - usb: gadget: Reject endpoints with 0 maxpacket value (bsc#1051510). - usb: gadget: udc: atmel: Fix interrupt storm in FIFO mode (bsc#1051510). - usb: handle warm-reset port requests on hub resume (bsc#1051510). - usb: ldusb: fix control-message timeout (bsc#1051510). - usb: ldusb: fix ring-buffer locking (bsc#1051510). - usb: serial: whiteheat: fix line-speed endianness (bsc#1051510). - usb: serial: whiteheat: fix potential slab corruption (bsc#1051510). - usb-storage: Revert commit 747668dbc061 ("usb-storage: Set virt_boundary_mask to avoid SG overflows") (bsc#1051510). - wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2507=1 Package List: - openSUSE Leap 15.1 (noarch): kernel-devel-4.12.14-lp151.28.32.1 kernel-docs-4.12.14-lp151.28.32.1 kernel-docs-html-4.12.14-lp151.28.32.1 kernel-macros-4.12.14-lp151.28.32.1 kernel-source-4.12.14-lp151.28.32.1 kernel-source-vanilla-4.12.14-lp151.28.32.1 - openSUSE Leap 15.1 (x86_64): kernel-debug-4.12.14-lp151.28.32.1 kernel-debug-base-4.12.14-lp151.28.32.1 kernel-debug-base-debuginfo-4.12.14-lp151.28.32.1 kernel-debug-debuginfo-4.12.14-lp151.28.32.1 kernel-debug-debugsource-4.12.14-lp151.28.32.1 kernel-debug-devel-4.12.14-lp151.28.32.1 kernel-debug-devel-debuginfo-4.12.14-lp151.28.32.1 kernel-default-4.12.14-lp151.28.32.1 kernel-default-base-4.12.14-lp151.28.32.1 kernel-default-base-debuginfo-4.12.14-lp151.28.32.1 kernel-default-debuginfo-4.12.14-lp151.28.32.1 kernel-default-debugsource-4.12.14-lp151.28.32.1 kernel-default-devel-4.12.14-lp151.28.32.1 kernel-default-devel-debuginfo-4.12.14-lp151.28.32.1 kernel-kvmsmall-4.12.14-lp151.28.32.1 kernel-kvmsmall-base-4.12.14-lp151.28.32.1 kernel-kvmsmall-base-debuginfo-4.12.14-lp151.28.32.1 kernel-kvmsmall-debuginfo-4.12.14-lp151.28.32.1 kernel-kvmsmall-debugsource-4.12.14-lp151.28.32.1 kernel-kvmsmall-devel-4.12.14-lp151.28.32.1 kernel-kvmsmall-devel-debuginfo-4.12.14-lp151.28.32.1 kernel-obs-build-4.12.14-lp151.28.32.1 kernel-obs-build-debugsource-4.12.14-lp151.28.32.1 kernel-obs-qa-4.12.14-lp151.28.32.1 kernel-syms-4.12.14-lp151.28.32.1 kernel-vanilla-4.12.14-lp151.28.32.1 kernel-vanilla-base-4.12.14-lp151.28.32.1 kernel-vanilla-base-debuginfo-4.12.14-lp151.28.32.1 kernel-vanilla-debuginfo-4.12.14-lp151.28.32.1 kernel-vanilla-debugsource-4.12.14-lp151.28.32.1 kernel-vanilla-devel-4.12.14-lp151.28.32.1 kernel-vanilla-devel-debuginfo-4.12.14-lp151.28.32.1 References: https://www.suse.com/security/cve/CVE-2018-12207.html https://www.suse.com/security/cve/CVE-2019-0154.html https://www.suse.com/security/cve/CVE-2019-0155.html https://www.suse.com/security/cve/CVE-2019-10220.html https://www.suse.com/security/cve/CVE-2019-11135.html https://www.suse.com/security/cve/CVE-2019-16231.html https://www.suse.com/security/cve/CVE-2019-17055.html https://www.suse.com/security/cve/CVE-2019-18805.html https://bugzilla.suse.com/1048942 https://bugzilla.suse.com/1051510 https://bugzilla.suse.com/1082635 https://bugzilla.suse.com/1090631 https://bugzilla.suse.com/1096254 https://bugzilla.suse.com/1111666 https://bugzilla.suse.com/1117665 https://bugzilla.suse.com/1119461 https://bugzilla.suse.com/1119465 https://bugzilla.suse.com/1123034 https://bugzilla.suse.com/1135966 https://bugzilla.suse.com/1135967 https://bugzilla.suse.com/1138190 https://bugzilla.suse.com/1139073 https://bugzilla.suse.com/1140090 https://bugzilla.suse.com/1143706 https://bugzilla.suse.com/1144903 https://bugzilla.suse.com/1149119 https://bugzilla.suse.com/1150466 https://bugzilla.suse.com/1152665 https://bugzilla.suse.com/1152696 https://bugzilla.suse.com/1152697 https://bugzilla.suse.com/1152782 https://bugzilla.suse.com/1153681 https://bugzilla.suse.com/1154124 https://bugzilla.suse.com/1154526 https://bugzilla.suse.com/1154858 https://bugzilla.suse.com/1154905 https://bugzilla.suse.com/1154956 https://bugzilla.suse.com/1155021 https://bugzilla.suse.com/1155061 https://bugzilla.suse.com/1155671 https://bugzilla.suse.com/1155692 https://bugzilla.suse.com/1155836 https://bugzilla.suse.com/1155982 https://bugzilla.suse.com/1156187 https://bugzilla.suse.com/1156429 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2505-1: important: Security update for qemu
by opensuse-security＠opensuse.org 14 Nov '19

14 Nov '19

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2505-1 Rating: important References: #1119991 #1146873 #1152506 #1155812 Cross-References: CVE-2018-12207 CVE-2018-20126 CVE-2019-11135 CVE-2019-12068 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for qemu fixes the following issues: - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15 - Fix use-after-free in slirp (CVE-2018-20126 bsc#1119991) - Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068 bsc#1146873) - Expose taa-no "feature", indicating CPU does not have the TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506) - Expose pschange-mc-no "feature", indicating CPU does not have the page size change machine check vulnerability (CVE-2018-12207 bsc#1155812) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2505=1 Package List: - openSUSE Leap 15.0 (x86_64): qemu-2.11.2-lp150.7.28.1 qemu-arm-2.11.2-lp150.7.28.1 qemu-arm-debuginfo-2.11.2-lp150.7.28.1 qemu-block-curl-2.11.2-lp150.7.28.1 qemu-block-curl-debuginfo-2.11.2-lp150.7.28.1 qemu-block-dmg-2.11.2-lp150.7.28.1 qemu-block-dmg-debuginfo-2.11.2-lp150.7.28.1 qemu-block-gluster-2.11.2-lp150.7.28.1 qemu-block-gluster-debuginfo-2.11.2-lp150.7.28.1 qemu-block-iscsi-2.11.2-lp150.7.28.1 qemu-block-iscsi-debuginfo-2.11.2-lp150.7.28.1 qemu-block-rbd-2.11.2-lp150.7.28.1 qemu-block-rbd-debuginfo-2.11.2-lp150.7.28.1 qemu-block-ssh-2.11.2-lp150.7.28.1 qemu-block-ssh-debuginfo-2.11.2-lp150.7.28.1 qemu-debuginfo-2.11.2-lp150.7.28.1 qemu-debugsource-2.11.2-lp150.7.28.1 qemu-extra-2.11.2-lp150.7.28.1 qemu-extra-debuginfo-2.11.2-lp150.7.28.1 qemu-guest-agent-2.11.2-lp150.7.28.1 qemu-guest-agent-debuginfo-2.11.2-lp150.7.28.1 qemu-ksm-2.11.2-lp150.7.28.1 qemu-kvm-2.11.2-lp150.7.28.1 qemu-lang-2.11.2-lp150.7.28.1 qemu-ppc-2.11.2-lp150.7.28.1 qemu-ppc-debuginfo-2.11.2-lp150.7.28.1 qemu-s390-2.11.2-lp150.7.28.1 qemu-s390-debuginfo-2.11.2-lp150.7.28.1 qemu-tools-2.11.2-lp150.7.28.1 qemu-tools-debuginfo-2.11.2-lp150.7.28.1 qemu-x86-2.11.2-lp150.7.28.1 qemu-x86-debuginfo-2.11.2-lp150.7.28.1 - openSUSE Leap 15.0 (noarch): qemu-ipxe-1.0.0+-lp150.7.28.1 qemu-seabios-1.11.0-lp150.7.28.1 qemu-sgabios-8-lp150.7.28.1 qemu-vgabios-1.11.0-lp150.7.28.1 References: https://www.suse.com/security/cve/CVE-2018-12207.html https://www.suse.com/security/cve/CVE-2018-20126.html https://www.suse.com/security/cve/CVE-2019-11135.html https://www.suse.com/security/cve/CVE-2019-12068.html https://bugzilla.suse.com/1119991 https://bugzilla.suse.com/1146873 https://bugzilla.suse.com/1152506 https://bugzilla.suse.com/1155812 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2506-1: important: Security update for xen
by opensuse-security＠opensuse.org 14 Nov '19

14 Nov '19

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2506-1 Rating: important References: #1152497 #1154448 #1154456 #1154458 #1154461 #1155945 Cross-References: CVE-2018-12207 CVE-2019-11135 CVE-2019-18420 CVE-2019-18421 CVE-2019-18424 CVE-2019-18425 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for xen fixes the following issues: - CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core to be non-functional. (bsc#1155945) - CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with Transactional Memory support could be used to facilitate sidechannel information leaks out of microarchitectural buffers, similar to the previously described "Microarchitectural Data Sampling" attack. (bsc#1152497). - CVE-2019-18425: 32-bit PV guest user mode could elevate its privileges to that of the guest kernel. (bsc#1154456). - CVE-2019-18421: A malicious PV guest administrator may have been able to escalate their privilege to that of the host. (bsc#1154458). - CVE-2019-18420: Malicious x86 PV guests may have caused a hypervisor crash, resulting in a Denial of Service (Dos). (bsc#1154448) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2506=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): xen-debugsource-4.10.4_06-lp150.2.25.1 xen-devel-4.10.4_06-lp150.2.25.1 xen-libs-4.10.4_06-lp150.2.25.1 xen-libs-debuginfo-4.10.4_06-lp150.2.25.1 xen-tools-domU-4.10.4_06-lp150.2.25.1 xen-tools-domU-debuginfo-4.10.4_06-lp150.2.25.1 - openSUSE Leap 15.0 (x86_64): xen-4.10.4_06-lp150.2.25.1 xen-doc-html-4.10.4_06-lp150.2.25.1 xen-libs-32bit-4.10.4_06-lp150.2.25.1 xen-libs-32bit-debuginfo-4.10.4_06-lp150.2.25.1 xen-tools-4.10.4_06-lp150.2.25.1 xen-tools-debuginfo-4.10.4_06-lp150.2.25.1 References: https://www.suse.com/security/cve/CVE-2018-12207.html https://www.suse.com/security/cve/CVE-2019-11135.html https://www.suse.com/security/cve/CVE-2019-18420.html https://www.suse.com/security/cve/CVE-2019-18421.html https://www.suse.com/security/cve/CVE-2019-18424.html https://www.suse.com/security/cve/CVE-2019-18425.html https://bugzilla.suse.com/1152497 https://bugzilla.suse.com/1154448 https://bugzilla.suse.com/1154456 https://bugzilla.suse.com/1154458 https://bugzilla.suse.com/1154461 https://bugzilla.suse.com/1155945 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2509-1: important: Security update for ucode-intel
by opensuse-security＠opensuse.org 14 Nov '19

14 Nov '19

openSUSE Security Update: Security update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2509-1 Rating: important References: #1139073 #1141035 #1155988 Cross-References: CVE-2019-11135 CVE-2019-11139 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for ucode-intel fixes the following issues: - Updated to 20191112 security release (bsc#1155988) - Processor Identifier Version Products - Model Stepping F-MO-S/PI Old->New - ---- new platforms ---------------------------------------- - CML-U62 A0 6-a6-0/80 000000c6 Core Gen10 Mobile - CNL-U D0 6-66-3/80 0000002a Core Gen8 Mobile - SKX-SP B1 6-55-3/97 01000150 Xeon Scalable - ICL U/Y D1 6-7e-5/80 00000046 Core Gen10 Mobile - ---- updated platforms ------------------------------------ - SKL U/Y D0 6-4e-3/c0 000000cc->000000d4 Core Gen6 Mobile - SKL H/S/E3 R0/N0 6-5e-3/36 000000cc->000000d4 Core Gen6 - AML-Y22 H0 6-8e-9/10 000000b4->000000c6 Core Gen8 Mobile - KBL-U/Y H0 6-8e-9/c0 000000b4->000000c6 Core Gen7 Mobile - CFL-U43e D0 6-8e-a/c0 000000b4->000000c6 Core Gen8 Mobile - WHL-U W0 6-8e-b/d0 000000b8->000000c6 Core Gen8 Mobile - AML-Y V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile - CML-U42 V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile - WHL-U V0 6-8e-c/94 000000b8->000000c6 Core Gen8 Mobile - KBL-G/X H0 6-9e-9/2a 000000b4->000000c6 Core Gen7/Gen8 - KBL-H/S/E3 B0 6-9e-9/2a 000000b4->000000c6 Core Gen7; Xeon E3 v6 - CFL-H/S/E3 U0 6-9e-a/22 000000b4->000000c6 Core Gen8 Desktop, Mobile, Xeon E - CFL-S B0 6-9e-b/02 000000b4->000000c6 Core Gen8 - CFL-H R0 6-9e-d/22 000000b8->000000c6 Core Gen9 Mobile - Includes security fixes for: - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073) - CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2509=1 Package List: - openSUSE Leap 15.1 (x86_64): ucode-intel-20191112-lp151.2.9.1 References: https://www.suse.com/security/cve/CVE-2019-11135.html https://www.suse.com/security/cve/CVE-2019-11139.html https://bugzilla.suse.com/1139073 https://bugzilla.suse.com/1141035 https://bugzilla.suse.com/1155988 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2503-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 14 Nov '19

14 Nov '19

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2503-1 Rating: important References: #1048942 #1051510 #1082635 #1083647 #1090631 #1096254 #1117665 #1119461 #1119465 #1123034 #1135966 #1135967 #1137040 #1138190 #1139073 #1140090 #1143706 #1144338 #1144903 #1146612 #1149119 #1150457 #1150466 #1152624 #1152685 #1152782 #1153476 #1153509 #1153681 #1153969 #1154124 #1154526 #1154737 #1154848 #1154858 #1154905 #1154956 #1155021 #1155178 #1155179 #1155184 #1155186 #1155671 #1155692 #1155836 #1155982 #1156187 #1156429 Cross-References: CVE-2018-12207 CVE-2019-0154 CVE-2019-0155 CVE-2019-10220 CVE-2019-11135 CVE-2019-16231 CVE-2019-16233 CVE-2019-16995 CVE-2019-17055 CVE-2019-18805 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves 10 vulnerabilities and has 38 fixes is now available. Description: The openSUSE Leap 15.0 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-0154: An unprotected read access to i915 registers has been fixed that could have been abused to facilitate a local denial-of-service attack. (bsc#1135966) - CVE-2019-0155: A privilege escalation vulnerability has been fixed in the i915 module that allowed batch buffers from user mode to gain super user privileges. (bsc#1135967) - CVE-2019-16231: drivers/net/fjes/fjes_main.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150466). - CVE-2019-18805: There was a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6 (bnc#1156187). - CVE-2019-17055: base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module did not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21 (bnc#1152782). - CVE-2019-16995: A memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c, if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d (bnc#1152685). - CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with Transactional Memory support could be used to facilitate sidechannel information leaks out of microarchitectural buffers, similar to the previously described "Microarchitectural Data Sampling" attack. The Linux kernel was supplemented with the option to disable TSX operation altogether (requiring CPU Microcode updates on older systems) and better flushing of microarchitectural buffers (VERW). The set of options available is described in our TID at https://www.suse.com/support/kb/doc/?id=7024251 - CVE-2019-16233: drivers/scsi/qla2xxx/qla_os.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150457). - CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core to be non-functional. The Linux Kernel kvm hypervisor was adjusted to avoid page size changes in executable pages by splitting / merging huge pages into small pages as needed. More information can be found on https://www.suse.com/support/kb/doc/?id=7023735 - CVE-2019-10220: Added sanity checks on the pathnames passed to the user space. (bsc#1144903). The following non-security bugs were fixed: - ALSA: bebob: Fix prototype of helper function to return negative value (bsc#1051510). - ALSA: bebob: fix to detect configured source of sampling clock for Focusrite Saffire Pro i/o series (git-fixes). - ALSA: hda: Add Elkhart Lake PCI ID (bsc#1051510). - ALSA: hda: Add Tigerlake/Jasperlake PCI ID (bsc#1051510). - ALSA: hda/ca0132 - Fix possible workqueue stall (bsc#1155836). - ALSA: hda/realtek - Add support for ALC623 (bsc#1051510). - ALSA: hda/realtek - Add support for ALC711 (bsc#1051510). - ALSA: hda/realtek - Fix 2 front mics of codec 0x623 (bsc#1051510). - ALSA: timer: Fix incorrectly assigned timer instance (git-fixes). - ALSA: timer: Fix mutex deadlock at releasing card (bsc#1051510). - arcnet: provide a buffer big enough to actually receive packets (networking-stable-19_09_30). - ASoc: rockchip: i2s: Fix RPM imbalance (bsc#1051510). - ASoC: rsnd: Reinitialize bit clock inversion flag for every format setting (bsc#1051510). - bpf: fix use after free in prog symbol exposure (bsc#1083647). - btrfs: block-group: Fix a memory leak due to missing btrfs_put_block_group() (bsc#1155178). - btrfs: qgroup: Always free PREALLOC META reserve in btrfs_delalloc_release_extents() (bsc#1155179). - btrfs: tracepoints: Fix bad entry members of qgroup events (bsc#1155186). - btrfs: tracepoints: Fix wrong parameter order for qgroup events (bsc#1155184). - can: dev: call netif_carrier_off() in register_candev() (bsc#1051510). - crypto: af_alg - consolidation of duplicate code (bsc#1154737). - crypto: af_alg - fix race accessing cipher request (bsc#1154737). - crypto: af_alg - Fix race around ctx->rcvused by making it atomic_t (bsc#1154737). - crypto: af_alg - Initialize sg_num_bytes in error code path (bsc#1051510). - crypto: af_alg - remove locking in async callback (bsc#1154737). - crypto: af_alg - update correct dst SGL entry (bsc#1051510). - crypto: af_alg - wait for data at beginning of recvmsg (bsc#1154737). - crypto: algif_aead - copy AAD from src to dst (bsc#1154737). - crypto: algif_aead - fix reference counting of null skcipher (bsc#1154737). - crypto: algif_aead - overhaul memory management (bsc#1154737). - crypto: algif_aead - skip SGL entries with NULL page (bsc#1154737). - crypto: algif - return error code when no data was processed (bsc#1154737). - crypto: algif_skcipher - overhaul memory management (bsc#1154737). - cxgb4:Fix out-of-bounds MSI-X info array access (networking-stable-19_10_05). - dmaengine: bcm2835: Print error in case setting DMA mask fails (bsc#1051510). - dmaengine: imx-sdma: fix size check for sdma script_number (bsc#1051510). - drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50 (bsc#1051510). - drm/i915: Add gen9 BCS cmdparsing (bsc#1135967) - drm/i915: Add support for mandatory cmdparsing (bsc#1135967) - drm/i915: Allow parsing of unsized batches (bsc#1135967) - drm/i915/cmdparser: Add support for backward jumps (bsc#1135967) - drm/i915/cmdparser: Ignore Length operands during command matching (bsc#1135967) - drm/i915/cmdparser: Use explicit goto for error paths (bsc#1135967) - drm/i915: Disable Secure Batches for gen6+ - drm/i915/gen8+: Add RC6 CTX corruption WA (bsc#1135967) - drm/i915/gtt: Add read only pages to gen8_pte_encode (bsc#1135967) - drm/i915/gtt: Disable read-only support under GVT (bsc#1135967) - drm/i915/gtt: Read-only pages for insert_entries on bdw (bsc#1135967) - drm/i915: Lower RM timeout to avoid DSI hard hangs (bsc#1135967) - drm/i915: Prevent writing into a read-only object via a GGTT mmap (bsc#1135967) - drm/i915: Remove Master tables from cmdparser - drm/i915: Rename gen7 cmdparser tables (bsc#1135967) - drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (bsc#1135967) - efi: cper: print AER info of PCIe fatal error (bsc#1051510). - efi/memattr: Do not bail on zero VA if it equals the region's PA (bsc#1051510). - efivar/ssdt: Do not iterate over EFI vars if no SSDT override was specified (bsc#1051510). - HID: fix error message in hid_open_report() (bsc#1051510). - HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy() (bsc#1051510). - hso: fix NULL-deref on tty open (bsc#1051510). - hyperv: set nvme msi interrupts to unmanaged (jsc#SLE-8953, jsc#SLE-9221, jsc#SLE-4941, bsc#1119461, bsc#1119465, bsc#1138190, bsc#1154905). - IB/core: Add mitigation for Spectre V1 (bsc#1155671) - ieee802154: ca8210: prevent memory leak (bsc#1051510). - input: synaptics-rmi4 - avoid processing unknown IRQs (bsc#1051510). - integrity: prevent deadlock during digsig verification (bsc#1090631). - ipv6: drop incoming packets having a v4mapped source address (networking-stable-19_10_05). - ipv6: Handle missing host route in __ipv6_ifa_notify (networking-stable-19_10_05). - iwlwifi: do not panic in error path on non-msix systems (bsc#1155692). - iwlwifi: exclude GEO SAR support for 3168 (git-fixes). - kABI workaround for crypto/af_alg changes (bsc#1154737). - kABI workaround for drm_vma_offset_node readonly field addition (bsc#1135967) - ksm: cleanup stable_node chain collapse case (bnc#1144338). - ksm: fix use after free with merge_across_nodes = 0 (bnc#1144338). - ksm: introduce ksm_max_page_sharing per page deduplication limit (bnc#1144338). - ksm: optimize refile of stable_node_dup at the head of the chain (bnc#1144338). - ksm: swap the two output parameters of chain/chain_prune (bnc#1144338). - KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (bsc#1117665). - mac80211: fix txq null pointer dereference (bsc#1051510). - mac80211: Reject malformed SSID elements (bsc#1051510). - md/raid0: avoid RAID0 data corruption due to layout confusion (bsc#1140090). - md/raid0: fix warning message for parameter default_layout (bsc#1140090). - Move upstreamed CA0132 fix into sorted section - netfilter: nf_nat: do not bug when mapping already exists (bsc#1146612). - net: openvswitch: free vport unless register_netdevice() succeeds (git-fixes). - net/phy: fix DP83865 10 Mbps HDX loopback disable function (networking-stable-19_09_30). - net: qlogic: Fix memory leak in ql_alloc_large_buffers (networking-stable-19_10_05). - net: qrtr: Stop rx_worker before freeing node (networking-stable-19_09_30). - net/rds: Fix error handling in rds_ib_add_one() (networking-stable-19_10_05). - net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848). - net/rds: remove user triggered WARN_ON in rds_sendmsg (bsc#1154848). - net: Replace NF_CT_ASSERT() with WARN_ON() (bsc#1146612). - net/sched: act_sample: do not push mac header on ip6gre ingress (networking-stable-19_09_30). - net_sched: add policy validation for action attributes (networking-stable-19_09_30). - net_sched: fix backward compatibility for TCA_ACT_KIND (git-fixes). - net: Unpublish sk from sk_reuseport_cb before call_rcu (networking-stable-19_10_05). - NFSv4.1 - backchannel request should hold ref on xprt (bsc#1152624). - nl80211: fix null pointer dereference (bsc#1051510). - openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC (networking-stable-19_09_30). - power: supply: max14656: fix potential use-after-free (bsc#1051510). - qmi_wwan: add support for Cinterion CLS8 devices (networking-stable-19_10_05). - r8152: Set macpassthru in reset_resume callback (bsc#1051510). - rds: Fix warning (bsc#1154848). - Revert "ALSA: hda: Flush interrupts on disabling" (bsc#1051510). - Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510). - Revert synaptics-rmi4 patch due to regression (bsc#1155982) Also blacklisting it - rpm/kernel-subpackage-spec: Mention debuginfo in the subpackage description (bsc#1149119). - s390/cmf: set_schib_wait add timeout (bsc#1153509, bsc#1153476). - s390/cpumsf: Check for CPU Measurement sampling (bsc#1153681 LTC#181855). - sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510). - sch_cbq: validate TCA_CBQ_WRROPT to avoid crash (networking-stable-19_10_05). - sch_dsmark: fix potential NULL deref in dsmark_init() (networking-stable-19_10_05). - sched/fair: Avoid divide by zero when rebalancing domains (bsc#1096254). - sch_netem: fix a divide by zero in tabledist() (networking-stable-19_09_30). - scsi: lpfc: Fix devices that do not return after devloss followed by rediscovery (bsc#1137040). - scsi: lpfc: Limit xri count for kdump environment (bsc#1154124). - scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Do command completion on abort timeout (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: do not use zero for FC4_PRIORITY_NVME (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Fix device connect issues in P2P configuration (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Fix memory leak when sending I/O fails (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Fix N2N link reset (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Fix N2N link up fail (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Fix partial flash write of MBI (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Fix SRB leak on switch command timeout (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Fix stale mem access on driver unload (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Fix unbound sleep in fcport delete path (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: fixup incorrect usage of host_byte (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Fix wait condition in loop (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Improve logging for scan thread (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Initialized mailbox to prevent driver load failure (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Optimize NPIV tear down process (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Remove an include directive (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: remove redundant assignment to pointer host (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: qla2xxx: Set remove flag for all VP (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Silence fwdump template message (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: stop timer in shutdown path (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Update driver version to 10.01.00.20-k (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Update driver version to 10.01.00.21-k (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942). - scsi: sd: Ignore a failure to sync cache due to lack of authorization (git-fixes). - scsi: storvsc: Add ability to change scsi queue depth (bsc#1155021). - scsi: zfcp: fix reaction on bit error threshold notification (bsc#1154956 LTC#182054). - serial: fix kernel-doc warning in comments (bsc#1051510). - serial: mctrl_gpio: Check for NULL pointer (bsc#1051510). - serial: uartlite: fix exit path null pointer (bsc#1051510). - skge: fix checksum byte order (networking-stable-19_09_30). - staging: rtl8188eu: fix null dereference when kzalloc fails (bsc#1051510). - staging: wlan-ng: fix exit return when sme->key_idx >= NUM_WEPKEYS (bsc#1051510). - supporte.conf: add efivarfs to kernel-default-base (bsc#1154858). - tipc: fix unlimited bundling of small messages (networking-stable-19_10_05). - tracing: Get trace_array reference for available_tracers files (bsc#1156429). - usb: gadget: Reject endpoints with 0 maxpacket value (bsc#1051510). - usb: gadget: udc: atmel: Fix interrupt storm in FIFO mode (bsc#1051510). - usb: handle warm-reset port requests on hub resume (bsc#1051510). - usb: ldusb: fix control-message timeout (bsc#1051510). - usb: ldusb: fix memleak on disconnect (bsc#1051510). - usb: ldusb: fix NULL-derefs on driver unbind (bsc#1051510). - usb: ldusb: fix read info leaks (bsc#1051510). - usb: ldusb: fix ring-buffer locking (bsc#1051510). - usb: legousbtower: fix a signedness bug in tower_probe() (bsc#1051510). - usb: legousbtower: fix memleak on disconnect (bsc#1051510). - usb: serial: ti_usb_3410_5052: fix port-close races (bsc#1051510). - usb: serial: whiteheat: fix line-speed endianness (bsc#1051510). - usb: serial: whiteheat: fix potential slab corruption (bsc#1051510). - usb-storage: Revert commit 747668dbc061 ("usb-storage: Set virt_boundary_mask to avoid SG overflows") (bsc#1051510). - usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510). - usb: usblp: fix use-after-free on disconnect (bsc#1051510). - vsock: Fix a lockdep warning in __vsock_release() (networking-stable-19_10_05). - x86/boot/64: Make level2_kernel_pgt pages invalid outside kernel area (bnc#1153969). - x86/boot/64: Round memory hole size up to next PMD page (bnc#1153969). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2503=1 Package List: - openSUSE Leap 15.0 (noarch): kernel-devel-4.12.14-lp150.12.82.1 kernel-docs-4.12.14-lp150.12.82.1 kernel-docs-html-4.12.14-lp150.12.82.1 kernel-macros-4.12.14-lp150.12.82.1 kernel-source-4.12.14-lp150.12.82.1 kernel-source-vanilla-4.12.14-lp150.12.82.1 - openSUSE Leap 15.0 (x86_64): kernel-debug-4.12.14-lp150.12.82.1 kernel-debug-base-4.12.14-lp150.12.82.1 kernel-debug-base-debuginfo-4.12.14-lp150.12.82.1 kernel-debug-debuginfo-4.12.14-lp150.12.82.1 kernel-debug-debugsource-4.12.14-lp150.12.82.1 kernel-debug-devel-4.12.14-lp150.12.82.1 kernel-debug-devel-debuginfo-4.12.14-lp150.12.82.1 kernel-default-4.12.14-lp150.12.82.1 kernel-default-base-4.12.14-lp150.12.82.1 kernel-default-base-debuginfo-4.12.14-lp150.12.82.1 kernel-default-debuginfo-4.12.14-lp150.12.82.1 kernel-default-debugsource-4.12.14-lp150.12.82.1 kernel-default-devel-4.12.14-lp150.12.82.1 kernel-default-devel-debuginfo-4.12.14-lp150.12.82.1 kernel-kvmsmall-4.12.14-lp150.12.82.1 kernel-kvmsmall-base-4.12.14-lp150.12.82.1 kernel-kvmsmall-base-debuginfo-4.12.14-lp150.12.82.1 kernel-kvmsmall-debuginfo-4.12.14-lp150.12.82.1 kernel-kvmsmall-debugsource-4.12.14-lp150.12.82.1 kernel-kvmsmall-devel-4.12.14-lp150.12.82.1 kernel-kvmsmall-devel-debuginfo-4.12.14-lp150.12.82.1 kernel-obs-build-4.12.14-lp150.12.82.1 kernel-obs-build-debugsource-4.12.14-lp150.12.82.1 kernel-obs-qa-4.12.14-lp150.12.82.1 kernel-syms-4.12.14-lp150.12.82.1 kernel-vanilla-4.12.14-lp150.12.82.1 kernel-vanilla-base-4.12.14-lp150.12.82.1 kernel-vanilla-base-debuginfo-4.12.14-lp150.12.82.1 kernel-vanilla-debuginfo-4.12.14-lp150.12.82.1 kernel-vanilla-debugsource-4.12.14-lp150.12.82.1 kernel-vanilla-devel-4.12.14-lp150.12.82.1 kernel-vanilla-devel-debuginfo-4.12.14-lp150.12.82.1 References: https://www.suse.com/security/cve/CVE-2018-12207.html https://www.suse.com/security/cve/CVE-2019-0154.html https://www.suse.com/security/cve/CVE-2019-0155.html https://www.suse.com/security/cve/CVE-2019-10220.html https://www.suse.com/security/cve/CVE-2019-11135.html https://www.suse.com/security/cve/CVE-2019-16231.html https://www.suse.com/security/cve/CVE-2019-16233.html https://www.suse.com/security/cve/CVE-2019-16995.html https://www.suse.com/security/cve/CVE-2019-17055.html https://www.suse.com/security/cve/CVE-2019-18805.html https://bugzilla.suse.com/1048942 https://bugzilla.suse.com/1051510 https://bugzilla.suse.com/1082635 https://bugzilla.suse.com/1083647 https://bugzilla.suse.com/1090631 https://bugzilla.suse.com/1096254 https://bugzilla.suse.com/1117665 https://bugzilla.suse.com/1119461 https://bugzilla.suse.com/1119465 https://bugzilla.suse.com/1123034 https://bugzilla.suse.com/1135966 https://bugzilla.suse.com/1135967 https://bugzilla.suse.com/1137040 https://bugzilla.suse.com/1138190 https://bugzilla.suse.com/1139073 https://bugzilla.suse.com/1140090 https://bugzilla.suse.com/1143706 https://bugzilla.suse.com/1144338 https://bugzilla.suse.com/1144903 https://bugzilla.suse.com/1146612 https://bugzilla.suse.com/1149119 https://bugzilla.suse.com/1150457 https://bugzilla.suse.com/1150466 https://bugzilla.suse.com/1152624 https://bugzilla.suse.com/1152685 https://bugzilla.suse.com/1152782 https://bugzilla.suse.com/1153476 https://bugzilla.suse.com/1153509 https://bugzilla.suse.com/1153681 https://bugzilla.suse.com/1153969 https://bugzilla.suse.com/1154124 https://bugzilla.suse.com/1154526 https://bugzilla.suse.com/1154737 https://bugzilla.suse.com/1154848 https://bugzilla.suse.com/1154858 https://bugzilla.suse.com/1154905 https://bugzilla.suse.com/1154956 https://bugzilla.suse.com/1155021 https://bugzilla.suse.com/1155178 https://bugzilla.suse.com/1155179 https://bugzilla.suse.com/1155184 https://bugzilla.suse.com/1155186 https://bugzilla.suse.com/1155671 https://bugzilla.suse.com/1155692 https://bugzilla.suse.com/1155836 https://bugzilla.suse.com/1155982 https://bugzilla.suse.com/1156187 https://bugzilla.suse.com/1156429 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2510-1: important: Security update for qemu
by opensuse-security＠opensuse.org 14 Nov '19

14 Nov '19

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2510-1 Rating: important References: #1079730 #1098403 #1111025 #1117665 #1119991 #1143794 #1144087 #1145379 #1145427 #1145436 #1145774 #1146873 #1149811 #1152506 Cross-References: CVE-2018-12207 CVE-2018-20126 CVE-2019-11135 CVE-2019-12068 CVE-2019-14378 CVE-2019-15890 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has 8 fixes is now available. Description: This update for qemu fixes the following issues: qemu was updated to v3.1.1.1, a stable, bug-fix-only release, which includes 2 fixes we already carry, as well as one additional use- after-free fix in slirp. (CVE-2018-20126 bsc#1119991, CVE-2019-14378 bsc#1143794, and CVE-2019-15890 bsc#1149811 respectively) Security issues fixed: - CVE-2019-12068: Fixed potential DOS in lsi scsi controller emulation (bsc#1146873) - CVE-2019-11135: Expose taa-no "feature", indicating CPU does not have the TSX Async Abort vulnerability. (bsc#1152506) - CVE-2018-12207: Expose pschange-mc-no "feature", indicating CPU does not have the page size change machine check vulnerability (bsc#1117665) Other issues fixed: - Change how this bug gets fixed (bsc#1144087) - Disable file locking in the Xen PV disk backend to avoid locking issues with PV domUs during migration. The issues triggered by the locking can not be properly handled in libxl. The locking introduced in qemu-2.10 was removed again in qemu-4.0. (bsc#1079730, bsc#1098403, bsc#1111025, bsc#1145427, bsc#1145774) - Feature support for vfio-ccw dasd ipl (bsc#1145379 jira-SLE-6132) - Additional hardware instruction support for s390, also update qemu linux headers to 5.2-rc1 (bsc#1145436 jira-SLE-6237) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2510=1 Package List: - openSUSE Leap 15.1 (x86_64): qemu-3.1.1.1-lp151.7.6.1 qemu-arm-3.1.1.1-lp151.7.6.1 qemu-arm-debuginfo-3.1.1.1-lp151.7.6.1 qemu-audio-alsa-3.1.1.1-lp151.7.6.1 qemu-audio-alsa-debuginfo-3.1.1.1-lp151.7.6.1 qemu-audio-oss-3.1.1.1-lp151.7.6.1 qemu-audio-oss-debuginfo-3.1.1.1-lp151.7.6.1 qemu-audio-pa-3.1.1.1-lp151.7.6.1 qemu-audio-pa-debuginfo-3.1.1.1-lp151.7.6.1 qemu-audio-sdl-3.1.1.1-lp151.7.6.1 qemu-audio-sdl-debuginfo-3.1.1.1-lp151.7.6.1 qemu-block-curl-3.1.1.1-lp151.7.6.1 qemu-block-curl-debuginfo-3.1.1.1-lp151.7.6.1 qemu-block-dmg-3.1.1.1-lp151.7.6.1 qemu-block-dmg-debuginfo-3.1.1.1-lp151.7.6.1 qemu-block-gluster-3.1.1.1-lp151.7.6.1 qemu-block-gluster-debuginfo-3.1.1.1-lp151.7.6.1 qemu-block-iscsi-3.1.1.1-lp151.7.6.1 qemu-block-iscsi-debuginfo-3.1.1.1-lp151.7.6.1 qemu-block-nfs-3.1.1.1-lp151.7.6.1 qemu-block-nfs-debuginfo-3.1.1.1-lp151.7.6.1 qemu-block-rbd-3.1.1.1-lp151.7.6.1 qemu-block-rbd-debuginfo-3.1.1.1-lp151.7.6.1 qemu-block-ssh-3.1.1.1-lp151.7.6.1 qemu-block-ssh-debuginfo-3.1.1.1-lp151.7.6.1 qemu-debuginfo-3.1.1.1-lp151.7.6.1 qemu-debugsource-3.1.1.1-lp151.7.6.1 qemu-extra-3.1.1.1-lp151.7.6.1 qemu-extra-debuginfo-3.1.1.1-lp151.7.6.1 qemu-guest-agent-3.1.1.1-lp151.7.6.1 qemu-guest-agent-debuginfo-3.1.1.1-lp151.7.6.1 qemu-ksm-3.1.1.1-lp151.7.6.1 qemu-kvm-3.1.1.1-lp151.7.6.1 qemu-lang-3.1.1.1-lp151.7.6.1 qemu-linux-user-3.1.1.1-lp151.7.6.1 qemu-linux-user-debuginfo-3.1.1.1-lp151.7.6.1 qemu-linux-user-debugsource-3.1.1.1-lp151.7.6.1 qemu-ppc-3.1.1.1-lp151.7.6.1 qemu-ppc-debuginfo-3.1.1.1-lp151.7.6.1 qemu-s390-3.1.1.1-lp151.7.6.1 qemu-s390-debuginfo-3.1.1.1-lp151.7.6.1 qemu-tools-3.1.1.1-lp151.7.6.1 qemu-tools-debuginfo-3.1.1.1-lp151.7.6.1 qemu-ui-curses-3.1.1.1-lp151.7.6.1 qemu-ui-curses-debuginfo-3.1.1.1-lp151.7.6.1 qemu-ui-gtk-3.1.1.1-lp151.7.6.1 qemu-ui-gtk-debuginfo-3.1.1.1-lp151.7.6.1 qemu-ui-sdl-3.1.1.1-lp151.7.6.1 qemu-ui-sdl-debuginfo-3.1.1.1-lp151.7.6.1 qemu-x86-3.1.1.1-lp151.7.6.1 qemu-x86-debuginfo-3.1.1.1-lp151.7.6.1 - openSUSE Leap 15.1 (noarch): qemu-ipxe-1.0.0+-lp151.7.6.1 qemu-seabios-1.12.0-lp151.7.6.1 qemu-sgabios-8-lp151.7.6.1 qemu-vgabios-1.12.0-lp151.7.6.1 References: https://www.suse.com/security/cve/CVE-2018-12207.html https://www.suse.com/security/cve/CVE-2018-20126.html https://www.suse.com/security/cve/CVE-2019-11135.html https://www.suse.com/security/cve/CVE-2019-12068.html https://www.suse.com/security/cve/CVE-2019-14378.html https://www.suse.com/security/cve/CVE-2019-15890.html https://bugzilla.suse.com/1079730 https://bugzilla.suse.com/1098403 https://bugzilla.suse.com/1111025 https://bugzilla.suse.com/1117665 https://bugzilla.suse.com/1119991 https://bugzilla.suse.com/1143794 https://bugzilla.suse.com/1144087 https://bugzilla.suse.com/1145379 https://bugzilla.suse.com/1145427 https://bugzilla.suse.com/1145436 https://bugzilla.suse.com/1145774 https://bugzilla.suse.com/1146873 https://bugzilla.suse.com/1149811 https://bugzilla.suse.com/1152506 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2504-1: important: Security update for ucode-intel
by opensuse-security＠opensuse.org 14 Nov '19

14 Nov '19

openSUSE Security Update: Security update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2504-1 Rating: important References: #1139073 #1141035 #1155988 Cross-References: CVE-2019-11135 CVE-2019-11139 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for ucode-intel fixes the following issues: - Updated to 20191112 security release (bsc#1155988) - Processor Identifier Version Products - Model Stepping F-MO-S/PI Old->New - ---- new platforms ---------------------------------------- - CML-U62 A0 6-a6-0/80 000000c6 Core Gen10 Mobile - CNL-U D0 6-66-3/80 0000002a Core Gen8 Mobile - SKX-SP B1 6-55-3/97 01000150 Xeon Scalable - ICL U/Y D1 6-7e-5/80 00000046 Core Gen10 Mobile - ---- updated platforms ------------------------------------ - SKL U/Y D0 6-4e-3/c0 000000cc->000000d4 Core Gen6 Mobile - SKL H/S/E3 R0/N0 6-5e-3/36 000000cc->000000d4 Core Gen6 - AML-Y22 H0 6-8e-9/10 000000b4->000000c6 Core Gen8 Mobile - KBL-U/Y H0 6-8e-9/c0 000000b4->000000c6 Core Gen7 Mobile - CFL-U43e D0 6-8e-a/c0 000000b4->000000c6 Core Gen8 Mobile - WHL-U W0 6-8e-b/d0 000000b8->000000c6 Core Gen8 Mobile - AML-Y V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile - CML-U42 V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile - WHL-U V0 6-8e-c/94 000000b8->000000c6 Core Gen8 Mobile - KBL-G/X H0 6-9e-9/2a 000000b4->000000c6 Core Gen7/Gen8 - KBL-H/S/E3 B0 6-9e-9/2a 000000b4->000000c6 Core Gen7; Xeon E3 v6 - CFL-H/S/E3 U0 6-9e-a/22 000000b4->000000c6 Core Gen8 Desktop, Mobile, Xeon E - CFL-S B0 6-9e-b/02 000000b4->000000c6 Core Gen8 - CFL-H R0 6-9e-d/22 000000b8->000000c6 Core Gen9 Mobile - Includes security fixes for: - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073) - CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2504=1 Package List: - openSUSE Leap 15.0 (x86_64): ucode-intel-20191112-lp150.2.30.1 References: https://www.suse.com/security/cve/CVE-2019-11135.html https://www.suse.com/security/cve/CVE-2019-11139.html https://bugzilla.suse.com/1139073 https://bugzilla.suse.com/1141035 https://bugzilla.suse.com/1155988 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2501-1: moderate: Security update for rsyslog
by opensuse-security＠opensuse.org 14 Nov '19

14 Nov '19

openSUSE Security Update: Security update for rsyslog ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2501-1 Rating: moderate References: #1141063 #1153451 #1153459 Cross-References: CVE-2019-17041 CVE-2019-17042 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for rsyslog fixes the following issues: Security issues fixed: - CVE-2019-17041: Fixed a heap overflow in the parser for AIX log messages (bsc#1153451). - CVE-2019-17042: Fixed a heap overflow in the parser for Cisco log messages (bsc#1153459). Other issue addressed: - Fixed an issue where rsyslog was SEGFAULT due to a mutex double-unlock (bsc#1141063). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2501=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): rsyslog-8.33.1-lp151.6.10.1 rsyslog-debuginfo-8.33.1-lp151.6.10.1 rsyslog-debugsource-8.33.1-lp151.6.10.1 rsyslog-diag-tools-8.33.1-lp151.6.10.1 rsyslog-diag-tools-debuginfo-8.33.1-lp151.6.10.1 rsyslog-doc-8.33.1-lp151.6.10.1 rsyslog-module-dbi-8.33.1-lp151.6.10.1 rsyslog-module-dbi-debuginfo-8.33.1-lp151.6.10.1 rsyslog-module-elasticsearch-8.33.1-lp151.6.10.1 rsyslog-module-elasticsearch-debuginfo-8.33.1-lp151.6.10.1 rsyslog-module-gcrypt-8.33.1-lp151.6.10.1 rsyslog-module-gcrypt-debuginfo-8.33.1-lp151.6.10.1 rsyslog-module-gssapi-8.33.1-lp151.6.10.1 rsyslog-module-gssapi-debuginfo-8.33.1-lp151.6.10.1 rsyslog-module-gtls-8.33.1-lp151.6.10.1 rsyslog-module-gtls-debuginfo-8.33.1-lp151.6.10.1 rsyslog-module-mmnormalize-8.33.1-lp151.6.10.1 rsyslog-module-mmnormalize-debuginfo-8.33.1-lp151.6.10.1 rsyslog-module-mysql-8.33.1-lp151.6.10.1 rsyslog-module-mysql-debuginfo-8.33.1-lp151.6.10.1 rsyslog-module-omamqp1-8.33.1-lp151.6.10.1 rsyslog-module-omamqp1-debuginfo-8.33.1-lp151.6.10.1 rsyslog-module-omhttpfs-8.33.1-lp151.6.10.1 rsyslog-module-omhttpfs-debuginfo-8.33.1-lp151.6.10.1 rsyslog-module-omtcl-8.33.1-lp151.6.10.1 rsyslog-module-omtcl-debuginfo-8.33.1-lp151.6.10.1 rsyslog-module-pgsql-8.33.1-lp151.6.10.1 rsyslog-module-pgsql-debuginfo-8.33.1-lp151.6.10.1 rsyslog-module-relp-8.33.1-lp151.6.10.1 rsyslog-module-relp-debuginfo-8.33.1-lp151.6.10.1 rsyslog-module-snmp-8.33.1-lp151.6.10.1 rsyslog-module-snmp-debuginfo-8.33.1-lp151.6.10.1 rsyslog-module-udpspoof-8.33.1-lp151.6.10.1 rsyslog-module-udpspoof-debuginfo-8.33.1-lp151.6.10.1 References: https://www.suse.com/security/cve/CVE-2019-17041.html https://www.suse.com/security/cve/CVE-2019-17042.html https://bugzilla.suse.com/1141063 https://bugzilla.suse.com/1153451 https://bugzilla.suse.com/1153459 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2500-1: moderate: Security update for rsyslog
by opensuse-security＠opensuse.org 13 Nov '19

13 Nov '19

openSUSE Security Update: Security update for rsyslog ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2500-1 Rating: moderate References: #1141063 #1153451 #1153459 Cross-References: CVE-2019-17041 CVE-2019-17042 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for rsyslog fixes the following issues: Security issues fixed: - CVE-2019-17041: Fixed a heap overflow in the parser for AIX log messages (bsc#1153451). - CVE-2019-17042: Fixed a heap overflow in the parser for Cisco log messages (bsc#1153459). Other issue addressed: - Fixed an issue where rsyslog was SEGFAULT due to a mutex double-unlock (bsc#1141063). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2500=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): rsyslog-8.33.1-lp150.2.19.1 rsyslog-debuginfo-8.33.1-lp150.2.19.1 rsyslog-debugsource-8.33.1-lp150.2.19.1 rsyslog-diag-tools-8.33.1-lp150.2.19.1 rsyslog-diag-tools-debuginfo-8.33.1-lp150.2.19.1 rsyslog-doc-8.33.1-lp150.2.19.1 rsyslog-module-dbi-8.33.1-lp150.2.19.1 rsyslog-module-dbi-debuginfo-8.33.1-lp150.2.19.1 rsyslog-module-elasticsearch-8.33.1-lp150.2.19.1 rsyslog-module-elasticsearch-debuginfo-8.33.1-lp150.2.19.1 rsyslog-module-gcrypt-8.33.1-lp150.2.19.1 rsyslog-module-gcrypt-debuginfo-8.33.1-lp150.2.19.1 rsyslog-module-gssapi-8.33.1-lp150.2.19.1 rsyslog-module-gssapi-debuginfo-8.33.1-lp150.2.19.1 rsyslog-module-gtls-8.33.1-lp150.2.19.1 rsyslog-module-gtls-debuginfo-8.33.1-lp150.2.19.1 rsyslog-module-mmnormalize-8.33.1-lp150.2.19.1 rsyslog-module-mmnormalize-debuginfo-8.33.1-lp150.2.19.1 rsyslog-module-mysql-8.33.1-lp150.2.19.1 rsyslog-module-mysql-debuginfo-8.33.1-lp150.2.19.1 rsyslog-module-omamqp1-8.33.1-lp150.2.19.1 rsyslog-module-omamqp1-debuginfo-8.33.1-lp150.2.19.1 rsyslog-module-omhttpfs-8.33.1-lp150.2.19.1 rsyslog-module-omhttpfs-debuginfo-8.33.1-lp150.2.19.1 rsyslog-module-omtcl-8.33.1-lp150.2.19.1 rsyslog-module-omtcl-debuginfo-8.33.1-lp150.2.19.1 rsyslog-module-pgsql-8.33.1-lp150.2.19.1 rsyslog-module-pgsql-debuginfo-8.33.1-lp150.2.19.1 rsyslog-module-relp-8.33.1-lp150.2.19.1 rsyslog-module-relp-debuginfo-8.33.1-lp150.2.19.1 rsyslog-module-snmp-8.33.1-lp150.2.19.1 rsyslog-module-snmp-debuginfo-8.33.1-lp150.2.19.1 rsyslog-module-udpspoof-8.33.1-lp150.2.19.1 rsyslog-module-udpspoof-debuginfo-8.33.1-lp150.2.19.1 References: https://www.suse.com/security/cve/CVE-2019-17041.html https://www.suse.com/security/cve/CVE-2019-17042.html https://bugzilla.suse.com/1141063 https://bugzilla.suse.com/1153451 https://bugzilla.suse.com/1153459 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2499-1: important: Security update for apache2-mod_auth_openidc
by opensuse-security＠opensuse.org 13 Nov '19

13 Nov '19

openSUSE Security Update: Security update for apache2-mod_auth_openidc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2499-1 Rating: important References: #1153666 Cross-References: CVE-2019-14857 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for apache2-mod_auth_openidc fixes the following issues: - CVE-2019-14857: Fixed an open redirect issue that exists in URLs with trailing slashes (bsc#1153666). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2499=1 Package List: - openSUSE Leap 15.1 (x86_64): apache2-mod_auth_openidc-2.3.8-lp151.2.3.1 apache2-mod_auth_openidc-debuginfo-2.3.8-lp151.2.3.1 apache2-mod_auth_openidc-debugsource-2.3.8-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-14857.html https://bugzilla.suse.com/1153666 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2493-1: moderate: Security update for gdb
by opensuse-security＠opensuse.org 13 Nov '19

13 Nov '19

openSUSE Security Update: Security update for gdb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2493-1 Rating: moderate References: #1115034 #1142772 #1145692 Cross-References: CVE-2019-1010180 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for gdb fixes the following issues: Update to gdb 8.3.1: (jsc#ECO-368) Security issues fixed: - CVE-2019-1010180: Fixed a potential buffer overflow when loading ELF sections larger than the file. (bsc#1142772) Upgrade libipt from v2.0 to v2.0.1. - Enable librpm for version > librpm.so.3 [bsc#1145692]: * Allow any librpm.so.x * Add %build test to check for "zypper install <rpm-packagename>" message - Copy gdbinit from fedora master @ 25caf28. Add gdbinit.without-python, and use it for --without=python. Rebase to 8.3 release (as in fedora 30 @ 1e222a3). * DWARF index cache: GDB can now automatically save indices of DWARF symbols on disk to speed up further loading of the same binaries. * Ada task switching is now supported on aarch64-elf targets when debugging a program using the Ravenscar Profile. * Terminal styling is now available for the CLI and the TUI. * Removed support for old demangling styles arm, edg, gnu, hp and lucid. * Support for new native configuration RISC-V GNU/Linux (riscv*-*-linux*). - Implemented access to more POWER8 registers. [fate#326120, fate#325178] - Handle most of new s390 arch13 instructions. [fate#327369, jsc#ECO-368] This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2493=1 Package List: - openSUSE Leap 15.0 (x86_64): gdb-8.3.1-lp150.2.10.1 gdb-debuginfo-8.3.1-lp150.2.10.1 gdb-debugsource-8.3.1-lp150.2.10.1 gdb-testresults-8.3.1-lp150.2.10.1 gdbserver-8.3.1-lp150.2.10.1 gdbserver-debuginfo-8.3.1-lp150.2.10.1 References: https://www.suse.com/security/cve/CVE-2019-1010180.html https://bugzilla.suse.com/1115034 https://bugzilla.suse.com/1142772 https://bugzilla.suse.com/1145692 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2494-1: moderate: Security update for gdb
by opensuse-security＠opensuse.org 12 Nov '19

12 Nov '19

openSUSE Security Update: Security update for gdb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2494-1 Rating: moderate References: #1115034 #1142772 #1145692 Cross-References: CVE-2019-1010180 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for gdb fixes the following issues: Update to gdb 8.3.1: (jsc#ECO-368) Security issues fixed: - CVE-2019-1010180: Fixed a potential buffer overflow when loading ELF sections larger than the file. (bsc#1142772) Upgrade libipt from v2.0 to v2.0.1. - Enable librpm for version > librpm.so.3 [bsc#1145692]: * Allow any librpm.so.x * Add %build test to check for "zypper install <rpm-packagename>" message - Copy gdbinit from fedora master @ 25caf28. Add gdbinit.without-python, and use it for --without=python. Rebase to 8.3 release (as in fedora 30 @ 1e222a3). * DWARF index cache: GDB can now automatically save indices of DWARF symbols on disk to speed up further loading of the same binaries. * Ada task switching is now supported on aarch64-elf targets when debugging a program using the Ravenscar Profile. * Terminal styling is now available for the CLI and the TUI. * Removed support for old demangling styles arm, edg, gnu, hp and lucid. * Support for new native configuration RISC-V GNU/Linux (riscv*-*-linux*). - Implemented access to more POWER8 registers. [fate#326120, fate#325178] - Handle most of new s390 arch13 instructions. [fate#327369, jsc#ECO-368] This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2494=1 Package List: - openSUSE Leap 15.1 (x86_64): gdb-8.3.1-lp151.4.3.1 gdb-debuginfo-8.3.1-lp151.4.3.1 gdb-debugsource-8.3.1-lp151.4.3.1 gdb-testresults-8.3.1-lp151.4.3.1 gdbserver-8.3.1-lp151.4.3.1 gdbserver-debuginfo-8.3.1-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-1010180.html https://bugzilla.suse.com/1115034 https://bugzilla.suse.com/1142772 https://bugzilla.suse.com/1145692 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] New Intel CPU issues announced - openSUSE fixes coming
by Marcus Meissner 12 Nov '19

12 Nov '19

Hi folks, Today Intel and security researchers published a number of security issues covering various Intel hardware and software components. These cover half a year of collected fixes, only some of them are relevant to the Operating System vendors. Two main relevant security issues are in there: 1. Machine Check Error on Page Size Changes / CVE-2018-12207 A race condition during instruction decoding and extended pagetable management on Intel CPUs could lead to Machine Check Errors (crashes of a CPU), a denial of service attack. This issue could be used by an attacker with full access to a guest VM to crash the host. This race condition exists in all current Intel CPUs, except Intel Atom and Knights Landing. There is a Intel Whitepaper: https://software.intel.com/security-software-guidance/insights/deep-dive-ma… SUSE provides a software mitigation for this issue in updates to its Hypervisors, both for KVM in the Linux Kernel and for XEN. The mitigations are not needed in guests. The mitigation is enabled by default, our TID https://www.suse.com/support/kb/doc/?id=7023735 has details on how to check its status and configuration. Updated packages are linked from https://www.suse.com/security/cve/CVE-2018-12207/ 2. Transactional Asynchronous Abort (TAA) / CVE-2019-11135 Researchers from TU Graz, KU Leuven, CISPA Helmholtz Center, VUSec group at VU Amsterdam have identified an additional CPU based information leak attack, similar to the "Microarchitectural Data Sampling" (MDS) attack published in May 2019. They showed that during an asynchronous abort of a Transactional Execution, various microarchitectural buffers might be speculatively accessed that could cause side effects similar to the MDS attack, leaking small amounts of recently or currently used data on the same CPU core. Intel has provided Microcode updates, and SUSE provides fixed Kernel and XEN packages to help mitigate this problem. Intels whitepaper is available at https://software.intel.com/security-software-guidance/insights/deep-dive-in… Depending on the environment, administrators also need to consider disabling Hyperthreading and/or disabling TSX support. Disabling TSX is only possible with the help of CPU Microcode updates on Cascade Lake and newer systems. We have not enabled the TSX disablement and the HT disablement, only the buffer clearing, to avoid performance losses. The options to control the mitigations are available and documented in our TID https://www.suse.com/support/kb/doc/?id=7024251 . Updated packages are linked from our https://www.suse.com/security/cve/CVE-2019-11135/ page SUSE has supplied online updates for the Linux Kernel, XEN, Intel CPU Microcode, and qemu to mitigate these issues. We will release openSUSE Leap and Tumbleweed fixes for this in the next day(s). Ciao, Marcus -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2483-1: moderate: Security update for libssh2_org
by opensuse-security＠opensuse.org 11 Nov '19

11 Nov '19

openSUSE Security Update: Security update for libssh2_org ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2483-1 Rating: moderate References: #1154862 Cross-References: CVE-2019-17498 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libssh2_org fixes the following issue: - CVE-2019-17498: Fixed an integer overflow in a bounds check that might have led to the disclosure of sensitive information or a denial of service (bsc#1154862). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2483=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libssh2-1-1.8.0-lp151.6.3.1 libssh2-1-debuginfo-1.8.0-lp151.6.3.1 libssh2-devel-1.8.0-lp151.6.3.1 libssh2_org-debugsource-1.8.0-lp151.6.3.1 - openSUSE Leap 15.1 (x86_64): libssh2-1-32bit-1.8.0-lp151.6.3.1 libssh2-1-32bit-debuginfo-1.8.0-lp151.6.3.1 References: https://www.suse.com/security/cve/CVE-2019-17498.html https://bugzilla.suse.com/1154862 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2477-1: moderate: Recommended update for bcm20702a1-firmware
by opensuse-security＠opensuse.org 10 Nov '19

10 Nov '19

openSUSE Security Update: Recommended update for bcm20702a1-firmware ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2477-1 Rating: moderate References: #1087996 #1154083 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for bcm20702a1-firmware fixes the following issues: Changes in bcm20702a1-firmware: - Use https to fetch the archive to avoid person-in-the-middle attacks (boo#1154083) - Fetch & install another variant firmware (0a5c:21e8) (boo#1087996) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2477=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2477=1 Package List: - openSUSE Leap 15.1 (noarch): bcm20702a1-firmware-1201650-lp151.3.3.1 - openSUSE Leap 15.0 (noarch): bcm20702a1-firmware-1201650-lp150.2.3.1 References: https://bugzilla.suse.com/1087996 https://bugzilla.suse.com/1154083 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2472-1: moderate: Security update for python-ecdsa
by opensuse-security＠opensuse.org 10 Nov '19

10 Nov '19

openSUSE Security Update: Security update for python-ecdsa ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2472-1 Rating: moderate References: #1153165 #1154217 Cross-References: CVE-2019-14853 CVE-2019-14859 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for python-ecdsa to version 0.13.3 fixes the following issues: Security issues fixed: - CVE-2019-14853: Fixed unexpected exceptions during signature decoding (bsc#1153165). - CVE-2019-14859: Fixed a signature malleability caused by insufficient checks of DER encoding (bsc#1154217). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2472=1 Package List: - openSUSE Leap 15.0 (noarch): python2-ecdsa-0.13.3-lp150.2.3.1 python3-ecdsa-0.13.3-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-14853.html https://www.suse.com/security/cve/CVE-2019-14859.html https://bugzilla.suse.com/1153165 https://bugzilla.suse.com/1154217 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2474-1: moderate: Security update for python-ecdsa
by opensuse-security＠opensuse.org 10 Nov '19

10 Nov '19

openSUSE Security Update: Security update for python-ecdsa ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2474-1 Rating: moderate References: #1153165 #1154217 Cross-References: CVE-2019-14853 CVE-2019-14859 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for python-ecdsa to version 0.13.3 fixes the following issues: Security issues fixed: - CVE-2019-14853: Fixed unexpected exceptions during signature decoding (bsc#1153165). - CVE-2019-14859: Fixed a signature malleability caused by insufficient checks of DER encoding (bsc#1154217). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2474=1 Package List: - openSUSE Leap 15.1 (noarch): python2-ecdsa-0.13.3-lp151.3.3.1 python3-ecdsa-0.13.3-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-14853.html https://www.suse.com/security/cve/CVE-2019-14859.html https://bugzilla.suse.com/1153165 https://bugzilla.suse.com/1154217 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2466-1: moderate: Security update for gdal
by opensuse-security＠opensuse.org 09 Nov '19

09 Nov '19

openSUSE Security Update: Security update for gdal ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2466-1 Rating: moderate References: #1153918 Cross-References: CVE-2019-17545 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gdal to version 2.4.3 fixes the following issues: gdal was updated to 2.4.3: - CVE-2019-17545: Fixed a double free vulnerability in OGRExpatRealloc (boo#1153918). - Multiple bug and stability fixes For more information regarding the release at: https://trac.osgeo.org/gdal/wiki/Release/2.4.3-News Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2466=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2466=1 Package List: - openSUSE Leap 15.1 (x86_64): gdal-2.4.3-lp151.3.3.1 gdal-debuginfo-2.4.3-lp151.3.3.1 gdal-debugsource-2.4.3-lp151.3.3.1 gdal-devel-2.4.3-lp151.3.3.1 libgdal20-2.4.3-lp151.3.3.1 libgdal20-debuginfo-2.4.3-lp151.3.3.1 perl-gdal-2.4.3-lp151.3.3.1 perl-gdal-debuginfo-2.4.3-lp151.3.3.1 python2-GDAL-2.4.3-lp151.3.3.1 python2-GDAL-debuginfo-2.4.3-lp151.3.3.1 python3-GDAL-2.4.3-lp151.3.3.1 python3-GDAL-debuginfo-2.4.3-lp151.3.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le x86_64): gdal-2.4.3-bp151.4.3.1 gdal-devel-2.4.3-bp151.4.3.1 libgdal20-2.4.3-bp151.4.3.1 perl-gdal-2.4.3-bp151.4.3.1 python2-GDAL-2.4.3-bp151.4.3.1 python3-GDAL-2.4.3-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-17545.html https://bugzilla.suse.com/1153918 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2453-1: moderate: Security update for python3
by opensuse-security＠opensuse.org 09 Nov '19

09 Nov '19

openSUSE Security Update: Security update for python3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2453-1 Rating: moderate References: #1149121 #1149792 #1149955 #1151490 #1153238 Cross-References: CVE-2019-16056 CVE-2019-16935 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has three fixes is now available. Description: This update for python3 to 3.6.9 fixes the following issues: Security issues fixed: - CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955) - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238). Non-security issues fixed: - Fixed regression of OpenSSL 1.1.1b-1 in EVP_PBE_scrypt() with salt=NULL. (bsc#1151490) - Improved locale handling by implementing PEP 538. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2453=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libpython3_6m1_0-3.6.9-lp150.2.14.1 libpython3_6m1_0-debuginfo-3.6.9-lp150.2.14.1 python3-3.6.9-lp150.2.14.1 python3-base-3.6.9-lp150.2.14.1 python3-base-debuginfo-3.6.9-lp150.2.14.1 python3-base-debugsource-3.6.9-lp150.2.14.1 python3-curses-3.6.9-lp150.2.14.1 python3-curses-debuginfo-3.6.9-lp150.2.14.1 python3-dbm-3.6.9-lp150.2.14.1 python3-dbm-debuginfo-3.6.9-lp150.2.14.1 python3-debuginfo-3.6.9-lp150.2.14.1 python3-debugsource-3.6.9-lp150.2.14.1 python3-devel-3.6.9-lp150.2.14.1 python3-devel-debuginfo-3.6.9-lp150.2.14.1 python3-idle-3.6.9-lp150.2.14.1 python3-testsuite-3.6.9-lp150.2.14.1 python3-testsuite-debuginfo-3.6.9-lp150.2.14.1 python3-tk-3.6.9-lp150.2.14.1 python3-tk-debuginfo-3.6.9-lp150.2.14.1 python3-tools-3.6.9-lp150.2.14.1 - openSUSE Leap 15.0 (x86_64): libpython3_6m1_0-32bit-3.6.9-lp150.2.14.1 libpython3_6m1_0-32bit-debuginfo-3.6.9-lp150.2.14.1 python3-32bit-3.6.9-lp150.2.14.1 python3-32bit-debuginfo-3.6.9-lp150.2.14.1 python3-base-32bit-3.6.9-lp150.2.14.1 python3-base-32bit-debuginfo-3.6.9-lp150.2.14.1 References: https://www.suse.com/security/cve/CVE-2019-16056.html https://www.suse.com/security/cve/CVE-2019-16935.html https://bugzilla.suse.com/1149121 https://bugzilla.suse.com/1149792 https://bugzilla.suse.com/1149955 https://bugzilla.suse.com/1151490 https://bugzilla.suse.com/1153238 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2454-1: moderate: Security update for libtomcrypt
by opensuse-security＠opensuse.org 09 Nov '19

09 Nov '19

openSUSE Security Update: Security update for libtomcrypt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2454-1 Rating: moderate References: #1153433 Cross-References: CVE-2019-17362 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libtomcrypt fixes the following issue: CVE-2019-17362: Fixed an improper detection of invalid UTF-8 sequences that could have led to DoS or information disclosure via crafted DER-encoded data (bsc#1153433). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2454=1 Package List: - openSUSE Leap 15.0 (x86_64): libtomcrypt-debugsource-1.17-lp150.2.3.1 libtomcrypt-devel-1.17-lp150.2.3.1 libtomcrypt-examples-1.17-lp150.2.3.1 libtomcrypt0-1.17-lp150.2.3.1 libtomcrypt0-debuginfo-1.17-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-17362.html https://bugzilla.suse.com/1153433 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2464-1: important: Recommended update for MozillaThunderbird
by opensuse-security＠opensuse.org 09 Nov '19

09 Nov '19

openSUSE Security Update: Recommended update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2464-1 Rating: important References: #1149126 #1149429 #1151186 #1152778 #1153879 #1154738 Cross-References: CVE-2019-11757 CVE-2019-11758 CVE-2019-11759 CVE-2019-11760 CVE-2019-11761 CVE-2019-11762 CVE-2019-11763 CVE-2019-11764 CVE-2019-15903 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This update for MozillaThunderbird to version 68.2.1 provides the following fixes: - Security issues fixed (bsc#1154738): * CVE-2019-15903: Fixed a heap overflow in the expat library (bsc#1149429). * CVE-2019-11757: Fixed a use-after-free when creating index updates in IndexedDB (bsc#1154738). * CVE-2019-11758: Fixed a potentially exploitable crash due to 360 Total Security (bsc#1154738). * CVE-2019-11759: Fixed a stack buffer overflow in HKDF output (bsc#1154738). * CVE-2019-11760: Fixed a stack buffer overflow in WebRTC networking (bsc#1154738). * CVE-2019-11761: Fixed an unintended access to a privileged JSONView object (bsc#1154738). * CVE-2019-11762: Fixed a same-origin-property violation (bsc#1154738). * CVE-2019-11763: Fixed an XSS bypass (bsc#1154738). * CVE-2019-11764: Fixed several memory safety bugs (bsc#1154738). Other fixes (bsc#1153879): * Some attachments couldn't be opened in messages originating from MS Outlook 2016. * Address book import from CSV. * Performance problem in message body search. * Ctrl+Enter to send a message would open an attachment if the attachment pane had focus. * Calendar: Issues with "Today Pane" start-up. * Calendar: Glitches with custom repeat and reminder number input. * Calendar: Problems with WCAP provider. * A language for the user interface can now be chosen in the advanced settings * Fixed an issue with Google authentication (OAuth2) * Fixed an issue where selected or unread messages were not shown in the correct color in the thread pane under some circumstances * Fixed an issue where when using a language pack, names of standard folders were not localized (bsc#1149126) * Fixed an issue where the address book default startup directory in preferences panel not persisted * Fixed various visual glitches * Fixed issues with the chat * Fixed building with rust >= 1.38. * Fixrd LTO build without PGO. * Removed kde.js since disabling instantApply breaks extensions and is now obsolete with the move to HTML views for preferences. (bsc#1151186) * Updated create-tar.sh. (bsc#1152778) * Deactivated the crashreporter for the last remaining arch. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2464=1 Package List: - openSUSE Leap 15.0 (x86_64): MozillaThunderbird-68.2.1-lp150.3.54.1 MozillaThunderbird-debuginfo-68.2.1-lp150.3.54.1 MozillaThunderbird-debugsource-68.2.1-lp150.3.54.1 MozillaThunderbird-translations-common-68.2.1-lp150.3.54.1 MozillaThunderbird-translations-other-68.2.1-lp150.3.54.1 References: https://www.suse.com/security/cve/CVE-2019-11757.html https://www.suse.com/security/cve/CVE-2019-11758.html https://www.suse.com/security/cve/CVE-2019-11759.html https://www.suse.com/security/cve/CVE-2019-11760.html https://www.suse.com/security/cve/CVE-2019-11761.html https://www.suse.com/security/cve/CVE-2019-11762.html https://www.suse.com/security/cve/CVE-2019-11763.html https://www.suse.com/security/cve/CVE-2019-11764.html https://www.suse.com/security/cve/CVE-2019-15903.html https://bugzilla.suse.com/1149126 https://bugzilla.suse.com/1149429 https://bugzilla.suse.com/1151186 https://bugzilla.suse.com/1152778 https://bugzilla.suse.com/1153879 https://bugzilla.suse.com/1154738 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2452-1: important: Recommended update for MozillaThunderbird
by opensuse-security＠opensuse.org 09 Nov '19

09 Nov '19

openSUSE Security Update: Recommended update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2452-1 Rating: important References: #1149126 #1149429 #1151186 #1152778 #1153879 #1154738 Cross-References: CVE-2019-11757 CVE-2019-11758 CVE-2019-11759 CVE-2019-11760 CVE-2019-11761 CVE-2019-11762 CVE-2019-11763 CVE-2019-11764 CVE-2019-15903 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This update for MozillaThunderbird to version 68.2.1 provides the following fixes: - Security issues fixed (bsc#1154738): * CVE-2019-15903: Fixed a heap overflow in the expat library (bsc#1149429). * CVE-2019-11757: Fixed a use-after-free when creating index updates in IndexedDB (bsc#1154738). * CVE-2019-11758: Fixed a potentially exploitable crash due to 360 Total Security (bsc#1154738). * CVE-2019-11759: Fixed a stack buffer overflow in HKDF output (bsc#1154738). * CVE-2019-11760: Fixed a stack buffer overflow in WebRTC networking (bsc#1154738). * CVE-2019-11761: Fixed an unintended access to a privileged JSONView object (bsc#1154738). * CVE-2019-11762: Fixed a same-origin-property violation (bsc#1154738). * CVE-2019-11763: Fixed an XSS bypass (bsc#1154738). * CVE-2019-11764: Fixed several memory safety bugs (bsc#1154738). Other fixes (bsc#1153879): * Some attachments couldn't be opened in messages originating from MS Outlook 2016. * Address book import from CSV. * Performance problem in message body search. * Ctrl+Enter to send a message would open an attachment if the attachment pane had focus. * Calendar: Issues with "Today Pane" start-up. * Calendar: Glitches with custom repeat and reminder number input. * Calendar: Problems with WCAP provider. * A language for the user interface can now be chosen in the advanced settings * Fixed an issue with Google authentication (OAuth2) * Fixed an issue where selected or unread messages were not shown in the correct color in the thread pane under some circumstances * Fixed an issue where when using a language pack, names of standard folders were not localized (bsc#1149126) * Fixed an issue where the address book default startup directory in preferences panel not persisted * Fixed various visual glitches * Fixed issues with the chat * Fixed building with rust >= 1.38. * Fixrd LTO build without PGO. * Removed kde.js since disabling instantApply breaks extensions and is now obsolete with the move to HTML views for preferences. (bsc#1151186) * Updated create-tar.sh. (bsc#1152778) * Deactivated the crashreporter for the last remaining arch. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2452=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaThunderbird-68.2.1-lp151.2.16.1 MozillaThunderbird-debuginfo-68.2.1-lp151.2.16.1 MozillaThunderbird-debugsource-68.2.1-lp151.2.16.1 MozillaThunderbird-translations-common-68.2.1-lp151.2.16.1 MozillaThunderbird-translations-other-68.2.1-lp151.2.16.1 References: https://www.suse.com/security/cve/CVE-2019-11757.html https://www.suse.com/security/cve/CVE-2019-11758.html https://www.suse.com/security/cve/CVE-2019-11759.html https://www.suse.com/security/cve/CVE-2019-11760.html https://www.suse.com/security/cve/CVE-2019-11761.html https://www.suse.com/security/cve/CVE-2019-11762.html https://www.suse.com/security/cve/CVE-2019-11763.html https://www.suse.com/security/cve/CVE-2019-11764.html https://www.suse.com/security/cve/CVE-2019-15903.html https://bugzilla.suse.com/1149126 https://bugzilla.suse.com/1149429 https://bugzilla.suse.com/1151186 https://bugzilla.suse.com/1152778 https://bugzilla.suse.com/1153879 https://bugzilla.suse.com/1154738 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2459-1: important: Security update for MozillaFirefox, MozillaFirefox-branding-SLE
by opensuse-security＠opensuse.org 09 Nov '19

09 Nov '19

openSUSE Security Update: Security update for MozillaFirefox, MozillaFirefox-branding-SLE ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2459-1 Rating: important References: #1104841 #1129528 #1137990 #1149429 #1151186 #1153423 #1153869 #1154738 Cross-References: CVE-2019-11757 CVE-2019-11758 CVE-2019-11759 CVE-2019-11760 CVE-2019-11761 CVE-2019-11762 CVE-2019-11763 CVE-2019-11764 CVE-2019-15903 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This update for MozillaFirefox, MozillaFirefox-branding-SLE fixes the following issues: Changes in MozillaFirefox: Security issues fixed: - CVE-2019-15903: Fixed a heap overflow in the expat library (bsc#1149429). - CVE-2019-11757: Fixed a use-after-free when creating index updates in IndexedDB (bsc#1154738). - CVE-2019-11758: Fixed a potentially exploitable crash due to 360 Total Security (bsc#1154738). - CVE-2019-11759: Fixed a stack buffer overflow in HKDF output (bsc#1154738). - CVE-2019-11760: Fixed a stack buffer overflow in WebRTC networking (bsc#1154738). - CVE-2019-11761: Fixed an unintended access to a privileged JSONView object (bsc#1154738). - CVE-2019-11762: Fixed a same-origin-property violation (bsc#1154738). - CVE-2019-11763: Fixed an XSS bypass (bsc#1154738). - CVE-2019-11764: Fixed several memory safety bugs (bsc#1154738). Non-security issues fixed: - Added Provides-line for translations-common (bsc#1153423) . - Moved some settings from branding-package here (bsc#1153869). - Disabled DoH by default. Changes in MozillaFirefox-branding-SLE: - Moved extensions preferences to core package (bsc#1153869). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2459=1 Package List: - openSUSE Leap 15.0 (x86_64): MozillaFirefox-68.2.0-lp150.3.71.1 MozillaFirefox-branding-openSUSE-68-lp150.3.3.1 MozillaFirefox-branding-upstream-68.2.0-lp150.3.71.1 MozillaFirefox-buildsymbols-68.2.0-lp150.3.71.1 MozillaFirefox-debuginfo-68.2.0-lp150.3.71.1 MozillaFirefox-debugsource-68.2.0-lp150.3.71.1 MozillaFirefox-devel-68.2.0-lp150.3.71.1 MozillaFirefox-translations-common-68.2.0-lp150.3.71.1 MozillaFirefox-translations-other-68.2.0-lp150.3.71.1 firefox-esr-branding-openSUSE-68-lp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-11757.html https://www.suse.com/security/cve/CVE-2019-11758.html https://www.suse.com/security/cve/CVE-2019-11759.html https://www.suse.com/security/cve/CVE-2019-11760.html https://www.suse.com/security/cve/CVE-2019-11761.html https://www.suse.com/security/cve/CVE-2019-11762.html https://www.suse.com/security/cve/CVE-2019-11763.html https://www.suse.com/security/cve/CVE-2019-11764.html https://www.suse.com/security/cve/CVE-2019-15903.html https://bugzilla.suse.com/1104841 https://bugzilla.suse.com/1129528 https://bugzilla.suse.com/1137990 https://bugzilla.suse.com/1149429 https://bugzilla.suse.com/1151186 https://bugzilla.suse.com/1153423 https://bugzilla.suse.com/1153869 https://bugzilla.suse.com/1154738 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2451-1: important: Security update for MozillaFirefox, MozillaFirefox-branding-SLE
by opensuse-security＠opensuse.org 09 Nov '19

09 Nov '19

openSUSE Security Update: Security update for MozillaFirefox, MozillaFirefox-branding-SLE ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2451-1 Rating: important References: #1104841 #1129528 #1137990 #1149429 #1151186 #1153423 #1153869 #1154738 Cross-References: CVE-2019-11757 CVE-2019-11758 CVE-2019-11759 CVE-2019-11760 CVE-2019-11761 CVE-2019-11762 CVE-2019-11763 CVE-2019-11764 CVE-2019-15903 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This update for MozillaFirefox, MozillaFirefox-branding-SLE fixes the following issues: Changes in MozillaFirefox: Security issues fixed: - CVE-2019-15903: Fixed a heap overflow in the expat library (bsc#1149429). - CVE-2019-11757: Fixed a use-after-free when creating index updates in IndexedDB (bsc#1154738). - CVE-2019-11758: Fixed a potentially exploitable crash due to 360 Total Security (bsc#1154738). - CVE-2019-11759: Fixed a stack buffer overflow in HKDF output (bsc#1154738). - CVE-2019-11760: Fixed a stack buffer overflow in WebRTC networking (bsc#1154738). - CVE-2019-11761: Fixed an unintended access to a privileged JSONView object (bsc#1154738). - CVE-2019-11762: Fixed a same-origin-property violation (bsc#1154738). - CVE-2019-11763: Fixed an XSS bypass (bsc#1154738). - CVE-2019-11764: Fixed several memory safety bugs (bsc#1154738). Non-security issues fixed: - Added Provides-line for translations-common (bsc#1153423) . - Moved some settings from branding-package here (bsc#1153869). - Disabled DoH by default. Changes in MozillaFirefox-branding-SLE: - Moved extensions preferences to core package (bsc#1153869). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2451=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaFirefox-68.2.0-lp151.2.18.2 MozillaFirefox-branding-openSUSE-68-lp151.3.3.1 MozillaFirefox-branding-upstream-68.2.0-lp151.2.18.2 MozillaFirefox-buildsymbols-68.2.0-lp151.2.18.2 MozillaFirefox-debuginfo-68.2.0-lp151.2.18.2 MozillaFirefox-debugsource-68.2.0-lp151.2.18.2 MozillaFirefox-devel-68.2.0-lp151.2.18.2 MozillaFirefox-translations-common-68.2.0-lp151.2.18.2 MozillaFirefox-translations-other-68.2.0-lp151.2.18.2 firefox-esr-branding-openSUSE-68-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-11757.html https://www.suse.com/security/cve/CVE-2019-11758.html https://www.suse.com/security/cve/CVE-2019-11759.html https://www.suse.com/security/cve/CVE-2019-11760.html https://www.suse.com/security/cve/CVE-2019-11761.html https://www.suse.com/security/cve/CVE-2019-11762.html https://www.suse.com/security/cve/CVE-2019-11763.html https://www.suse.com/security/cve/CVE-2019-11764.html https://www.suse.com/security/cve/CVE-2019-15903.html https://bugzilla.suse.com/1104841 https://bugzilla.suse.com/1129528 https://bugzilla.suse.com/1137990 https://bugzilla.suse.com/1149429 https://bugzilla.suse.com/1151186 https://bugzilla.suse.com/1153423 https://bugzilla.suse.com/1153869 https://bugzilla.suse.com/1154738 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2458-1: important: Security update for samba
by opensuse-security＠opensuse.org 09 Nov '19

09 Nov '19

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2458-1 Rating: important References: #1125601 #1127153 #1130245 #1134452 #1144902 #1154289 #1154598 Cross-References: CVE-2019-10218 CVE-2019-14833 CVE-2019-14847 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves three vulnerabilities and has four fixes is now available. Description: This update for samba fixes the following issues: Security issues fixed: - CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync (bsc#1154598). - CVE-2019-10218: Client code can return filenames containing path separators (bsc#1144902). - CVE-2019-14833: Fixed Accent with "check script password" where the Samba AD DC check password script does not receive the full password (bsc#1154289). Other issues fixed: - Fix vfs_ceph realpath (bsc#1134452). - MacOS credit accounting breaks with async SESSION SETUP (bsc#1125601). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection - Explicitly enable libcephfs POSIX ACL support (bsc#1130245). - Fix vfs_ceph ftruncate and fallocate handling (bsc#1127153). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2458=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): ctdb-4.7.11+git.186.d75219614c3-lp150.3.18.2 ctdb-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 ctdb-pcp-pmda-4.7.11+git.186.d75219614c3-lp150.3.18.2 ctdb-pcp-pmda-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 ctdb-tests-4.7.11+git.186.d75219614c3-lp150.3.18.2 ctdb-tests-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libdcerpc-binding0-4.7.11+git.186.d75219614c3-lp150.3.18.2 libdcerpc-binding0-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libdcerpc-devel-4.7.11+git.186.d75219614c3-lp150.3.18.2 libdcerpc-samr-devel-4.7.11+git.186.d75219614c3-lp150.3.18.2 libdcerpc-samr0-4.7.11+git.186.d75219614c3-lp150.3.18.2 libdcerpc-samr0-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libdcerpc0-4.7.11+git.186.d75219614c3-lp150.3.18.2 libdcerpc0-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libndr-devel-4.7.11+git.186.d75219614c3-lp150.3.18.2 libndr-krb5pac-devel-4.7.11+git.186.d75219614c3-lp150.3.18.2 libndr-krb5pac0-4.7.11+git.186.d75219614c3-lp150.3.18.2 libndr-krb5pac0-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libndr-nbt-devel-4.7.11+git.186.d75219614c3-lp150.3.18.2 libndr-nbt0-4.7.11+git.186.d75219614c3-lp150.3.18.2 libndr-nbt0-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libndr-standard-devel-4.7.11+git.186.d75219614c3-lp150.3.18.2 libndr-standard0-4.7.11+git.186.d75219614c3-lp150.3.18.2 libndr-standard0-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libndr0-4.7.11+git.186.d75219614c3-lp150.3.18.2 libndr0-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libnetapi-devel-4.7.11+git.186.d75219614c3-lp150.3.18.2 libnetapi0-4.7.11+git.186.d75219614c3-lp150.3.18.2 libnetapi0-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-credentials-devel-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-credentials0-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-credentials0-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-errors-devel-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-errors0-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-errors0-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-hostconfig-devel-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-hostconfig0-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-hostconfig0-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-passdb-devel-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-passdb0-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-passdb0-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-policy-devel-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-policy0-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-policy0-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-util-devel-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-util0-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-util0-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamdb-devel-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamdb0-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamdb0-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsmbclient-devel-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsmbclient0-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsmbclient0-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsmbconf-devel-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsmbconf0-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsmbconf0-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsmbldap-devel-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsmbldap2-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsmbldap2-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libtevent-util-devel-4.7.11+git.186.d75219614c3-lp150.3.18.2 libtevent-util0-4.7.11+git.186.d75219614c3-lp150.3.18.2 libtevent-util0-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libwbclient-devel-4.7.11+git.186.d75219614c3-lp150.3.18.2 libwbclient0-4.7.11+git.186.d75219614c3-lp150.3.18.2 libwbclient0-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-client-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-client-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-core-devel-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-debugsource-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-dsdb-modules-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-dsdb-modules-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-kdc-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-kdc-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-libs-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-libs-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-pidl-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-python-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-python-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-test-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-test-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-winbind-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-winbind-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 - openSUSE Leap 15.0 (x86_64): libdcerpc-binding0-32bit-4.7.11+git.186.d75219614c3-lp150.3.18.2 libdcerpc-binding0-32bit-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libdcerpc-samr0-32bit-4.7.11+git.186.d75219614c3-lp150.3.18.2 libdcerpc-samr0-32bit-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libdcerpc0-32bit-4.7.11+git.186.d75219614c3-lp150.3.18.2 libdcerpc0-32bit-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libndr-krb5pac0-32bit-4.7.11+git.186.d75219614c3-lp150.3.18.2 libndr-krb5pac0-32bit-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libndr-nbt0-32bit-4.7.11+git.186.d75219614c3-lp150.3.18.2 libndr-nbt0-32bit-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libndr-standard0-32bit-4.7.11+git.186.d75219614c3-lp150.3.18.2 libndr-standard0-32bit-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libndr0-32bit-4.7.11+git.186.d75219614c3-lp150.3.18.2 libndr0-32bit-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libnetapi0-32bit-4.7.11+git.186.d75219614c3-lp150.3.18.2 libnetapi0-32bit-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-credentials0-32bit-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-credentials0-32bit-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-errors0-32bit-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-errors0-32bit-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-hostconfig0-32bit-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-hostconfig0-32bit-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-passdb0-32bit-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-passdb0-32bit-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-policy0-32bit-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-policy0-32bit-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-util0-32bit-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamba-util0-32bit-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamdb0-32bit-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsamdb0-32bit-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsmbclient0-32bit-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsmbclient0-32bit-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsmbconf0-32bit-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsmbconf0-32bit-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsmbldap2-32bit-4.7.11+git.186.d75219614c3-lp150.3.18.2 libsmbldap2-32bit-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libtevent-util0-32bit-4.7.11+git.186.d75219614c3-lp150.3.18.2 libtevent-util0-32bit-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 libwbclient0-32bit-4.7.11+git.186.d75219614c3-lp150.3.18.2 libwbclient0-32bit-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-ceph-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-ceph-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-client-32bit-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-client-32bit-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-kdc-32bit-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-kdc-32bit-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-libs-32bit-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-libs-32bit-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-winbind-32bit-4.7.11+git.186.d75219614c3-lp150.3.18.2 samba-winbind-32bit-debuginfo-4.7.11+git.186.d75219614c3-lp150.3.18.2 - openSUSE Leap 15.0 (noarch): samba-doc-4.7.11+git.186.d75219614c3-lp150.3.18.2 References: https://www.suse.com/security/cve/CVE-2019-10218.html https://www.suse.com/security/cve/CVE-2019-14833.html https://www.suse.com/security/cve/CVE-2019-14847.html https://bugzilla.suse.com/1125601 https://bugzilla.suse.com/1127153 https://bugzilla.suse.com/1130245 https://bugzilla.suse.com/1134452 https://bugzilla.suse.com/1144902 https://bugzilla.suse.com/1154289 https://bugzilla.suse.com/1154598 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2457-1: important: Security update for php7
by opensuse-security＠opensuse.org 09 Nov '19

09 Nov '19

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2457-1 Rating: important References: #1154999 Cross-References: CVE-2019-11043 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for php7 fixes the following issues: Security issue fixed: - CVE-2019-11043: Fixed possible remote code execution via env_path_info underflow in fpm_main.c (bsc#1154999). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2457=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): apache2-mod_php7-7.2.5-lp150.2.29.2 apache2-mod_php7-debuginfo-7.2.5-lp150.2.29.2 php7-7.2.5-lp150.2.29.2 php7-bcmath-7.2.5-lp150.2.29.2 php7-bcmath-debuginfo-7.2.5-lp150.2.29.2 php7-bz2-7.2.5-lp150.2.29.2 php7-bz2-debuginfo-7.2.5-lp150.2.29.2 php7-calendar-7.2.5-lp150.2.29.2 php7-calendar-debuginfo-7.2.5-lp150.2.29.2 php7-ctype-7.2.5-lp150.2.29.2 php7-ctype-debuginfo-7.2.5-lp150.2.29.2 php7-curl-7.2.5-lp150.2.29.2 php7-curl-debuginfo-7.2.5-lp150.2.29.2 php7-dba-7.2.5-lp150.2.29.2 php7-dba-debuginfo-7.2.5-lp150.2.29.2 php7-debuginfo-7.2.5-lp150.2.29.2 php7-debugsource-7.2.5-lp150.2.29.2 php7-devel-7.2.5-lp150.2.29.2 php7-dom-7.2.5-lp150.2.29.2 php7-dom-debuginfo-7.2.5-lp150.2.29.2 php7-embed-7.2.5-lp150.2.29.2 php7-embed-debuginfo-7.2.5-lp150.2.29.2 php7-enchant-7.2.5-lp150.2.29.2 php7-enchant-debuginfo-7.2.5-lp150.2.29.2 php7-exif-7.2.5-lp150.2.29.2 php7-exif-debuginfo-7.2.5-lp150.2.29.2 php7-fastcgi-7.2.5-lp150.2.29.2 php7-fastcgi-debuginfo-7.2.5-lp150.2.29.2 php7-fileinfo-7.2.5-lp150.2.29.2 php7-fileinfo-debuginfo-7.2.5-lp150.2.29.2 php7-firebird-7.2.5-lp150.2.29.2 php7-firebird-debuginfo-7.2.5-lp150.2.29.2 php7-fpm-7.2.5-lp150.2.29.2 php7-fpm-debuginfo-7.2.5-lp150.2.29.2 php7-ftp-7.2.5-lp150.2.29.2 php7-ftp-debuginfo-7.2.5-lp150.2.29.2 php7-gd-7.2.5-lp150.2.29.2 php7-gd-debuginfo-7.2.5-lp150.2.29.2 php7-gettext-7.2.5-lp150.2.29.2 php7-gettext-debuginfo-7.2.5-lp150.2.29.2 php7-gmp-7.2.5-lp150.2.29.2 php7-gmp-debuginfo-7.2.5-lp150.2.29.2 php7-iconv-7.2.5-lp150.2.29.2 php7-iconv-debuginfo-7.2.5-lp150.2.29.2 php7-intl-7.2.5-lp150.2.29.2 php7-intl-debuginfo-7.2.5-lp150.2.29.2 php7-json-7.2.5-lp150.2.29.2 php7-json-debuginfo-7.2.5-lp150.2.29.2 php7-ldap-7.2.5-lp150.2.29.2 php7-ldap-debuginfo-7.2.5-lp150.2.29.2 php7-mbstring-7.2.5-lp150.2.29.2 php7-mbstring-debuginfo-7.2.5-lp150.2.29.2 php7-mysql-7.2.5-lp150.2.29.2 php7-mysql-debuginfo-7.2.5-lp150.2.29.2 php7-odbc-7.2.5-lp150.2.29.2 php7-odbc-debuginfo-7.2.5-lp150.2.29.2 php7-opcache-7.2.5-lp150.2.29.2 php7-opcache-debuginfo-7.2.5-lp150.2.29.2 php7-openssl-7.2.5-lp150.2.29.2 php7-openssl-debuginfo-7.2.5-lp150.2.29.2 php7-pcntl-7.2.5-lp150.2.29.2 php7-pcntl-debuginfo-7.2.5-lp150.2.29.2 php7-pdo-7.2.5-lp150.2.29.2 php7-pdo-debuginfo-7.2.5-lp150.2.29.2 php7-pgsql-7.2.5-lp150.2.29.2 php7-pgsql-debuginfo-7.2.5-lp150.2.29.2 php7-phar-7.2.5-lp150.2.29.2 php7-phar-debuginfo-7.2.5-lp150.2.29.2 php7-posix-7.2.5-lp150.2.29.2 php7-posix-debuginfo-7.2.5-lp150.2.29.2 php7-readline-7.2.5-lp150.2.29.2 php7-readline-debuginfo-7.2.5-lp150.2.29.2 php7-shmop-7.2.5-lp150.2.29.2 php7-shmop-debuginfo-7.2.5-lp150.2.29.2 php7-snmp-7.2.5-lp150.2.29.2 php7-snmp-debuginfo-7.2.5-lp150.2.29.2 php7-soap-7.2.5-lp150.2.29.2 php7-soap-debuginfo-7.2.5-lp150.2.29.2 php7-sockets-7.2.5-lp150.2.29.2 php7-sockets-debuginfo-7.2.5-lp150.2.29.2 php7-sodium-7.2.5-lp150.2.29.2 php7-sodium-debuginfo-7.2.5-lp150.2.29.2 php7-sqlite-7.2.5-lp150.2.29.2 php7-sqlite-debuginfo-7.2.5-lp150.2.29.2 php7-sysvmsg-7.2.5-lp150.2.29.2 php7-sysvmsg-debuginfo-7.2.5-lp150.2.29.2 php7-sysvsem-7.2.5-lp150.2.29.2 php7-sysvsem-debuginfo-7.2.5-lp150.2.29.2 php7-sysvshm-7.2.5-lp150.2.29.2 php7-sysvshm-debuginfo-7.2.5-lp150.2.29.2 php7-test-7.2.5-lp150.2.29.2 php7-tidy-7.2.5-lp150.2.29.2 php7-tidy-debuginfo-7.2.5-lp150.2.29.2 php7-tokenizer-7.2.5-lp150.2.29.2 php7-tokenizer-debuginfo-7.2.5-lp150.2.29.2 php7-wddx-7.2.5-lp150.2.29.2 php7-wddx-debuginfo-7.2.5-lp150.2.29.2 php7-xmlreader-7.2.5-lp150.2.29.2 php7-xmlreader-debuginfo-7.2.5-lp150.2.29.2 php7-xmlrpc-7.2.5-lp150.2.29.2 php7-xmlrpc-debuginfo-7.2.5-lp150.2.29.2 php7-xmlwriter-7.2.5-lp150.2.29.2 php7-xmlwriter-debuginfo-7.2.5-lp150.2.29.2 php7-xsl-7.2.5-lp150.2.29.2 php7-xsl-debuginfo-7.2.5-lp150.2.29.2 php7-zip-7.2.5-lp150.2.29.2 php7-zip-debuginfo-7.2.5-lp150.2.29.2 php7-zlib-7.2.5-lp150.2.29.2 php7-zlib-debuginfo-7.2.5-lp150.2.29.2 - openSUSE Leap 15.0 (noarch): php7-pear-7.2.5-lp150.2.29.2 php7-pear-Archive_Tar-7.2.5-lp150.2.29.2 References: https://www.suse.com/security/cve/CVE-2019-11043.html https://bugzilla.suse.com/1154999 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2447-1: important: Security update for chromium
by opensuse-security＠opensuse.org 06 Nov '19

06 Nov '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2447-1 Rating: important References: #1143492 #1144625 #1145242 #1146219 #1149143 #1150425 #1151229 #1153660 #1154806 #1155643 Cross-References: CVE-2019-13659 CVE-2019-13660 CVE-2019-13661 CVE-2019-13662 CVE-2019-13663 CVE-2019-13664 CVE-2019-13665 CVE-2019-13666 CVE-2019-13667 CVE-2019-13668 CVE-2019-13669 CVE-2019-13670 CVE-2019-13671 CVE-2019-13673 CVE-2019-13674 CVE-2019-13675 CVE-2019-13676 CVE-2019-13677 CVE-2019-13678 CVE-2019-13679 CVE-2019-13680 CVE-2019-13681 CVE-2019-13682 CVE-2019-13683 CVE-2019-13685 CVE-2019-13686 CVE-2019-13687 CVE-2019-13688 CVE-2019-13693 CVE-2019-13694 CVE-2019-13695 CVE-2019-13696 CVE-2019-13697 CVE-2019-13699 CVE-2019-13700 CVE-2019-13701 CVE-2019-13702 CVE-2019-13703 CVE-2019-13704 CVE-2019-13705 CVE-2019-13706 CVE-2019-13707 CVE-2019-13708 CVE-2019-13709 CVE-2019-13710 CVE-2019-13711 CVE-2019-13713 CVE-2019-13714 CVE-2019-13715 CVE-2019-13716 CVE-2019-13717 CVE-2019-13718 CVE-2019-13719 CVE-2019-13720 CVE-2019-13721 CVE-2019-15903 CVE-2019-5850 CVE-2019-5851 CVE-2019-5852 CVE-2019-5853 CVE-2019-5854 CVE-2019-5855 CVE-2019-5856 CVE-2019-5857 CVE-2019-5858 CVE-2019-5859 CVE-2019-5860 CVE-2019-5861 CVE-2019-5862 CVE-2019-5863 CVE-2019-5864 CVE-2019-5865 CVE-2019-5867 CVE-2019-5868 CVE-2019-5869 CVE-2019-5870 CVE-2019-5871 CVE-2019-5872 CVE-2019-5874 CVE-2019-5875 CVE-2019-5876 CVE-2019-5877 CVE-2019-5878 CVE-2019-5879 CVE-2019-5880 CVE-2019-5881 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 86 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium was updated to 78.0.3904.87: (boo#1155643,boo#1154806,boo#1153660, boo#1151229,boo#1149143,boo#1145242,boo#1143492) Security issues fixed with this version update: * CVE-2019-13721: Use-after-free in PDFium * CVE-2019-13720: Use-after-free in audio * CVE-2019-13699: Use-after-free in media * CVE-2019-13700: Buffer overrun in Blink * CVE-2019-13701: URL spoof in navigation * CVE-2019-13702: Privilege elevation in Installer * CVE-2019-13703: URL bar spoofing * CVE-2019-13704: CSP bypass * CVE-2019-13705: Extension permission bypass * CVE-2019-13706: Out-of-bounds read in PDFium * CVE-2019-13707: File storage disclosure * CVE-2019-13708: HTTP authentication spoof * CVE-2019-13709: File download protection bypass * CVE-2019-13710: File download protection bypass * CVE-2019-13711: Cross-context information leak * CVE-2019-15903: Buffer overflow in expat * CVE-2019-13713: Cross-origin data leak * CVE-2019-13714: CSS injection * CVE-2019-13715: Address bar spoofing * CVE-2019-13716: Service worker state error * CVE-2019-13717: Notification obscured * CVE-2019-13718: IDN spoof * CVE-2019-13719: Notification obscured * CVE-2019-13693: Use-after-free in IndexedDB * CVE-2019-13694: Use-after-free in WebRTC * CVE-2019-13695: Use-after-free in audio * CVE-2019-13696: Use-after-free in V8 * CVE-2019-13697: Cross-origin size leak. * CVE-2019-13685: Use-after-free in UI * CVE-2019-13688: Use-after-free in media * CVE-2019-13687: Use-after-free in media * CVE-2019-13686: Use-after-free in offline pages * CVE-2019-5870: Use-after-free in media * CVE-2019-5871: Heap overflow in Skia * CVE-2019-5872: Use-after-free in Mojo * CVE-2019-5874: External URIs may trigger other browsers * CVE-2019-5875: URL bar spoof via download redirect * CVE-2019-5876: Use-after-free in media * CVE-2019-5877: Out-of-bounds access in V8 * CVE-2019-5878: Use-after-free in V8 * CVE-2019-5879: Extension can bypass same origin policy * CVE-2019-5880: SameSite cookie bypass * CVE-2019-5881: Arbitrary read in SwiftShader * CVE-2019-13659: URL spoof * CVE-2019-13660: Full screen notification overlap * CVE-2019-13661: Full screen notification spoof * CVE-2019-13662: CSP bypass * CVE-2019-13663: IDN spoof * CVE-2019-13664: CSRF bypass * CVE-2019-13665: Multiple file download protection bypass * CVE-2019-13666: Side channel using storage size estimate * CVE-2019-13667: URI bar spoof when using external app URIs * CVE-2019-13668: Global window leak via console * CVE-2019-13669: HTTP authentication spoof * CVE-2019-13670: V8 memory corruption in regex * CVE-2019-13671: Dialog box fails to show origin * CVE-2019-13673: Cross-origin information leak using devtools * CVE-2019-13674: IDN spoofing * CVE-2019-13675: Extensions can be disabled by trailing slash * CVE-2019-13676: Google URI shown for certificate warning * CVE-2019-13677: Chrome web store origin needs to be isolated * CVE-2019-13678: Download dialog spoofing * CVE-2019-13679: User gesture needed for printing * CVE-2019-13680: IP address spoofing to servers * CVE-2019-13681: Bypass on download restrictions * CVE-2019-13682: Site isolation bypass * CVE-2019-13683: Exceptions leaked by devtools * CVE-2019-5869: Use-after-free in Blink * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction * CVE-2019-5867: Out-of-bounds read in V8 * CVE-2019-5850: Use-after-free in offline page fetcher * CVE-2019-5860: Use-after-free in PDFium * CVE-2019-5853: Memory corruption in regexp length check * CVE-2019-5851: Use-after-poison in offline audio context * CVE-2019-5859: res: URIs can load alternative browsers * CVE-2019-5856: Insufficient checks on filesystem: URI permissions * CVE-2019-5855: Integer overflow in PDFium * CVE-2019-5865: Site isolation bypass from compromised renderer * CVE-2019-5858: Insufficient filtering of Open URL service parameters * CVE-2019-5864: Insufficient port filtering in CORS for extensions * CVE-2019-5862: AppCache not robust to compromised renderers * CVE-2019-5861: Click location incorrectly checked * CVE-2019-5857: Comparison of -0 and null yields crash * CVE-2019-5854: Integer overflow in PDFium text rendering * CVE-2019-5852: Object leak of utility functions Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-2447=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 x86_64): chromedriver-78.0.3904.87-10.1 chromium-78.0.3904.87-10.1 References: https://www.suse.com/security/cve/CVE-2019-13659.html https://www.suse.com/security/cve/CVE-2019-13660.html https://www.suse.com/security/cve/CVE-2019-13661.html https://www.suse.com/security/cve/CVE-2019-13662.html https://www.suse.com/security/cve/CVE-2019-13663.html https://www.suse.com/security/cve/CVE-2019-13664.html https://www.suse.com/security/cve/CVE-2019-13665.html https://www.suse.com/security/cve/CVE-2019-13666.html https://www.suse.com/security/cve/CVE-2019-13667.html https://www.suse.com/security/cve/CVE-2019-13668.html https://www.suse.com/security/cve/CVE-2019-13669.html https://www.suse.com/security/cve/CVE-2019-13670.html https://www.suse.com/security/cve/CVE-2019-13671.html https://www.suse.com/security/cve/CVE-2019-13673.html https://www.suse.com/security/cve/CVE-2019-13674.html https://www.suse.com/security/cve/CVE-2019-13675.html https://www.suse.com/security/cve/CVE-2019-13676.html https://www.suse.com/security/cve/CVE-2019-13677.html https://www.suse.com/security/cve/CVE-2019-13678.html https://www.suse.com/security/cve/CVE-2019-13679.html https://www.suse.com/security/cve/CVE-2019-13680.html https://www.suse.com/security/cve/CVE-2019-13681.html https://www.suse.com/security/cve/CVE-2019-13682.html https://www.suse.com/security/cve/CVE-2019-13683.html https://www.suse.com/security/cve/CVE-2019-13685.html https://www.suse.com/security/cve/CVE-2019-13686.html https://www.suse.com/security/cve/CVE-2019-13687.html https://www.suse.com/security/cve/CVE-2019-13688.html https://www.suse.com/security/cve/CVE-2019-13693.html https://www.suse.com/security/cve/CVE-2019-13694.html https://www.suse.com/security/cve/CVE-2019-13695.html https://www.suse.com/security/cve/CVE-2019-13696.html https://www.suse.com/security/cve/CVE-2019-13697.html https://www.suse.com/security/cve/CVE-2019-13699.html https://www.suse.com/security/cve/CVE-2019-13700.html https://www.suse.com/security/cve/CVE-2019-13701.html https://www.suse.com/security/cve/CVE-2019-13702.html https://www.suse.com/security/cve/CVE-2019-13703.html https://www.suse.com/security/cve/CVE-2019-13704.html https://www.suse.com/security/cve/CVE-2019-13705.html https://www.suse.com/security/cve/CVE-2019-13706.html https://www.suse.com/security/cve/CVE-2019-13707.html https://www.suse.com/security/cve/CVE-2019-13708.html https://www.suse.com/security/cve/CVE-2019-13709.html https://www.suse.com/security/cve/CVE-2019-13710.html https://www.suse.com/security/cve/CVE-2019-13711.html https://www.suse.com/security/cve/CVE-2019-13713.html https://www.suse.com/security/cve/CVE-2019-13714.html https://www.suse.com/security/cve/CVE-2019-13715.html https://www.suse.com/security/cve/CVE-2019-13716.html https://www.suse.com/security/cve/CVE-2019-13717.html https://www.suse.com/security/cve/CVE-2019-13718.html https://www.suse.com/security/cve/CVE-2019-13719.html https://www.suse.com/security/cve/CVE-2019-13720.html https://www.suse.com/security/cve/CVE-2019-13721.html https://www.suse.com/security/cve/CVE-2019-15903.html https://www.suse.com/security/cve/CVE-2019-5850.html https://www.suse.com/security/cve/CVE-2019-5851.html https://www.suse.com/security/cve/CVE-2019-5852.html https://www.suse.com/security/cve/CVE-2019-5853.html https://www.suse.com/security/cve/CVE-2019-5854.html https://www.suse.com/security/cve/CVE-2019-5855.html https://www.suse.com/security/cve/CVE-2019-5856.html https://www.suse.com/security/cve/CVE-2019-5857.html https://www.suse.com/security/cve/CVE-2019-5858.html https://www.suse.com/security/cve/CVE-2019-5859.html https://www.suse.com/security/cve/CVE-2019-5860.html https://www.suse.com/security/cve/CVE-2019-5861.html https://www.suse.com/security/cve/CVE-2019-5862.html https://www.suse.com/security/cve/CVE-2019-5863.html https://www.suse.com/security/cve/CVE-2019-5864.html https://www.suse.com/security/cve/CVE-2019-5865.html https://www.suse.com/security/cve/CVE-2019-5867.html https://www.suse.com/security/cve/CVE-2019-5868.html https://www.suse.com/security/cve/CVE-2019-5869.html https://www.suse.com/security/cve/CVE-2019-5870.html https://www.suse.com/security/cve/CVE-2019-5871.html https://www.suse.com/security/cve/CVE-2019-5872.html https://www.suse.com/security/cve/CVE-2019-5874.html https://www.suse.com/security/cve/CVE-2019-5875.html https://www.suse.com/security/cve/CVE-2019-5876.html https://www.suse.com/security/cve/CVE-2019-5877.html https://www.suse.com/security/cve/CVE-2019-5878.html https://www.suse.com/security/cve/CVE-2019-5879.html https://www.suse.com/security/cve/CVE-2019-5880.html https://www.suse.com/security/cve/CVE-2019-5881.html https://bugzilla.suse.com/1143492 https://bugzilla.suse.com/1144625 https://bugzilla.suse.com/1145242 https://bugzilla.suse.com/1146219 https://bugzilla.suse.com/1149143 https://bugzilla.suse.com/1150425 https://bugzilla.suse.com/1151229 https://bugzilla.suse.com/1153660 https://bugzilla.suse.com/1154806 https://bugzilla.suse.com/1155643 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2438-1: moderate: Security update for python3
by opensuse-security＠opensuse.org 05 Nov '19

05 Nov '19

openSUSE Security Update: Security update for python3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2438-1 Rating: moderate References: #1149121 #1149792 #1149955 #1151490 #1153238 Cross-References: CVE-2019-16056 CVE-2019-16935 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has three fixes is now available. Description: This update for python3 to 3.6.9 fixes the following issues: Security issues fixed: - CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955) - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238). Non-security issues fixed: - Fixed regression of OpenSSL 1.1.1b-1 in EVP_PBE_scrypt() with salt=NULL. (bsc#1151490) - Improved locale handling by implementing PEP 538. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2438=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpython3_6m1_0-3.6.9-lp151.6.4.1 libpython3_6m1_0-debuginfo-3.6.9-lp151.6.4.1 python3-3.6.9-lp151.6.4.1 python3-base-3.6.9-lp151.6.4.1 python3-base-debuginfo-3.6.9-lp151.6.4.1 python3-base-debugsource-3.6.9-lp151.6.4.1 python3-curses-3.6.9-lp151.6.4.1 python3-curses-debuginfo-3.6.9-lp151.6.4.1 python3-dbm-3.6.9-lp151.6.4.1 python3-dbm-debuginfo-3.6.9-lp151.6.4.1 python3-debuginfo-3.6.9-lp151.6.4.1 python3-debugsource-3.6.9-lp151.6.4.1 python3-devel-3.6.9-lp151.6.4.1 python3-devel-debuginfo-3.6.9-lp151.6.4.1 python3-idle-3.6.9-lp151.6.4.1 python3-testsuite-3.6.9-lp151.6.4.1 python3-testsuite-debuginfo-3.6.9-lp151.6.4.1 python3-tk-3.6.9-lp151.6.4.1 python3-tk-debuginfo-3.6.9-lp151.6.4.1 python3-tools-3.6.9-lp151.6.4.1 - openSUSE Leap 15.1 (x86_64): libpython3_6m1_0-32bit-3.6.9-lp151.6.4.1 libpython3_6m1_0-32bit-debuginfo-3.6.9-lp151.6.4.1 python3-32bit-3.6.9-lp151.6.4.1 python3-32bit-debuginfo-3.6.9-lp151.6.4.1 python3-base-32bit-3.6.9-lp151.6.4.1 python3-base-32bit-debuginfo-3.6.9-lp151.6.4.1 References: https://www.suse.com/security/cve/CVE-2019-16056.html https://www.suse.com/security/cve/CVE-2019-16935.html https://bugzilla.suse.com/1149121 https://bugzilla.suse.com/1149792 https://bugzilla.suse.com/1149955 https://bugzilla.suse.com/1151490 https://bugzilla.suse.com/1153238 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2441-1: important: Security update for php7
by opensuse-security＠opensuse.org 05 Nov '19

05 Nov '19

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2441-1 Rating: important References: #1154999 Cross-References: CVE-2019-11043 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for php7 fixes the following issues: Security issue fixed: - CVE-2019-11043: Fixed possible remote code execution via env_path_info underflow in fpm_main.c (bsc#1154999). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2441=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): apache2-mod_php7-7.2.5-lp151.6.13.1 apache2-mod_php7-debuginfo-7.2.5-lp151.6.13.1 php7-7.2.5-lp151.6.13.1 php7-bcmath-7.2.5-lp151.6.13.1 php7-bcmath-debuginfo-7.2.5-lp151.6.13.1 php7-bz2-7.2.5-lp151.6.13.1 php7-bz2-debuginfo-7.2.5-lp151.6.13.1 php7-calendar-7.2.5-lp151.6.13.1 php7-calendar-debuginfo-7.2.5-lp151.6.13.1 php7-ctype-7.2.5-lp151.6.13.1 php7-ctype-debuginfo-7.2.5-lp151.6.13.1 php7-curl-7.2.5-lp151.6.13.1 php7-curl-debuginfo-7.2.5-lp151.6.13.1 php7-dba-7.2.5-lp151.6.13.1 php7-dba-debuginfo-7.2.5-lp151.6.13.1 php7-debuginfo-7.2.5-lp151.6.13.1 php7-debugsource-7.2.5-lp151.6.13.1 php7-devel-7.2.5-lp151.6.13.1 php7-dom-7.2.5-lp151.6.13.1 php7-dom-debuginfo-7.2.5-lp151.6.13.1 php7-embed-7.2.5-lp151.6.13.1 php7-embed-debuginfo-7.2.5-lp151.6.13.1 php7-enchant-7.2.5-lp151.6.13.1 php7-enchant-debuginfo-7.2.5-lp151.6.13.1 php7-exif-7.2.5-lp151.6.13.1 php7-exif-debuginfo-7.2.5-lp151.6.13.1 php7-fastcgi-7.2.5-lp151.6.13.1 php7-fastcgi-debuginfo-7.2.5-lp151.6.13.1 php7-fileinfo-7.2.5-lp151.6.13.1 php7-fileinfo-debuginfo-7.2.5-lp151.6.13.1 php7-firebird-7.2.5-lp151.6.13.1 php7-firebird-debuginfo-7.2.5-lp151.6.13.1 php7-fpm-7.2.5-lp151.6.13.1 php7-fpm-debuginfo-7.2.5-lp151.6.13.1 php7-ftp-7.2.5-lp151.6.13.1 php7-ftp-debuginfo-7.2.5-lp151.6.13.1 php7-gd-7.2.5-lp151.6.13.1 php7-gd-debuginfo-7.2.5-lp151.6.13.1 php7-gettext-7.2.5-lp151.6.13.1 php7-gettext-debuginfo-7.2.5-lp151.6.13.1 php7-gmp-7.2.5-lp151.6.13.1 php7-gmp-debuginfo-7.2.5-lp151.6.13.1 php7-iconv-7.2.5-lp151.6.13.1 php7-iconv-debuginfo-7.2.5-lp151.6.13.1 php7-intl-7.2.5-lp151.6.13.1 php7-intl-debuginfo-7.2.5-lp151.6.13.1 php7-json-7.2.5-lp151.6.13.1 php7-json-debuginfo-7.2.5-lp151.6.13.1 php7-ldap-7.2.5-lp151.6.13.1 php7-ldap-debuginfo-7.2.5-lp151.6.13.1 php7-mbstring-7.2.5-lp151.6.13.1 php7-mbstring-debuginfo-7.2.5-lp151.6.13.1 php7-mysql-7.2.5-lp151.6.13.1 php7-mysql-debuginfo-7.2.5-lp151.6.13.1 php7-odbc-7.2.5-lp151.6.13.1 php7-odbc-debuginfo-7.2.5-lp151.6.13.1 php7-opcache-7.2.5-lp151.6.13.1 php7-opcache-debuginfo-7.2.5-lp151.6.13.1 php7-openssl-7.2.5-lp151.6.13.1 php7-openssl-debuginfo-7.2.5-lp151.6.13.1 php7-pcntl-7.2.5-lp151.6.13.1 php7-pcntl-debuginfo-7.2.5-lp151.6.13.1 php7-pdo-7.2.5-lp151.6.13.1 php7-pdo-debuginfo-7.2.5-lp151.6.13.1 php7-pgsql-7.2.5-lp151.6.13.1 php7-pgsql-debuginfo-7.2.5-lp151.6.13.1 php7-phar-7.2.5-lp151.6.13.1 php7-phar-debuginfo-7.2.5-lp151.6.13.1 php7-posix-7.2.5-lp151.6.13.1 php7-posix-debuginfo-7.2.5-lp151.6.13.1 php7-readline-7.2.5-lp151.6.13.1 php7-readline-debuginfo-7.2.5-lp151.6.13.1 php7-shmop-7.2.5-lp151.6.13.1 php7-shmop-debuginfo-7.2.5-lp151.6.13.1 php7-snmp-7.2.5-lp151.6.13.1 php7-snmp-debuginfo-7.2.5-lp151.6.13.1 php7-soap-7.2.5-lp151.6.13.1 php7-soap-debuginfo-7.2.5-lp151.6.13.1 php7-sockets-7.2.5-lp151.6.13.1 php7-sockets-debuginfo-7.2.5-lp151.6.13.1 php7-sodium-7.2.5-lp151.6.13.1 php7-sodium-debuginfo-7.2.5-lp151.6.13.1 php7-sqlite-7.2.5-lp151.6.13.1 php7-sqlite-debuginfo-7.2.5-lp151.6.13.1 php7-sysvmsg-7.2.5-lp151.6.13.1 php7-sysvmsg-debuginfo-7.2.5-lp151.6.13.1 php7-sysvsem-7.2.5-lp151.6.13.1 php7-sysvsem-debuginfo-7.2.5-lp151.6.13.1 php7-sysvshm-7.2.5-lp151.6.13.1 php7-sysvshm-debuginfo-7.2.5-lp151.6.13.1 php7-test-7.2.5-lp151.6.13.1 php7-tidy-7.2.5-lp151.6.13.1 php7-tidy-debuginfo-7.2.5-lp151.6.13.1 php7-tokenizer-7.2.5-lp151.6.13.1 php7-tokenizer-debuginfo-7.2.5-lp151.6.13.1 php7-wddx-7.2.5-lp151.6.13.1 php7-wddx-debuginfo-7.2.5-lp151.6.13.1 php7-xmlreader-7.2.5-lp151.6.13.1 php7-xmlreader-debuginfo-7.2.5-lp151.6.13.1 php7-xmlrpc-7.2.5-lp151.6.13.1 php7-xmlrpc-debuginfo-7.2.5-lp151.6.13.1 php7-xmlwriter-7.2.5-lp151.6.13.1 php7-xmlwriter-debuginfo-7.2.5-lp151.6.13.1 php7-xsl-7.2.5-lp151.6.13.1 php7-xsl-debuginfo-7.2.5-lp151.6.13.1 php7-zip-7.2.5-lp151.6.13.1 php7-zip-debuginfo-7.2.5-lp151.6.13.1 php7-zlib-7.2.5-lp151.6.13.1 php7-zlib-debuginfo-7.2.5-lp151.6.13.1 - openSUSE Leap 15.1 (noarch): php7-pear-7.2.5-lp151.6.13.1 php7-pear-Archive_Tar-7.2.5-lp151.6.13.1 References: https://www.suse.com/security/cve/CVE-2019-11043.html https://bugzilla.suse.com/1154999 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2444-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 05 Nov '19

05 Nov '19

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2444-1 Rating: important References: #1046299 #1046303 #1046305 #1050244 #1050536 #1050545 #1051510 #1055186 #1061840 #1064802 #1065600 #1066129 #1073513 #1082635 #1083647 #1086323 #1087092 #1089644 #1093205 #1097583 #1097584 #1097585 #1097586 #1097587 #1097588 #1098291 #1101674 #1109158 #1111666 #1112178 #1113994 #1114279 #1117665 #1123034 #1123080 #1133140 #1134303 #1135642 #1135854 #1135873 #1137040 #1137799 #1137861 #1140729 #1140845 #1140883 #1141600 #1142635 #1142667 #1143706 #1144338 #1144375 #1144449 #1145099 #1146612 #1148410 #1149853 #1150452 #1150457 #1150465 #1150875 #1151508 #1151807 #1152033 #1152624 #1152685 #1152788 #1152790 #1152791 #1153112 #1153158 #1153236 #1153263 #1153476 #1153509 #1153607 #1153646 #1153713 #1153717 #1153718 #1153719 #1153811 #1153969 #1154108 #1154189 #1154242 #1154268 #1154354 #1154372 #1154521 #1154578 #1154607 #1154608 #1154610 #1154611 #1154651 #1154737 #1154747 #1154848 #1155178 #1155179 #1155184 #1155186 Cross-References: CVE-2019-16232 CVE-2019-16233 CVE-2019-16234 CVE-2019-16995 CVE-2019-17056 CVE-2019-17133 CVE-2019-17666 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves 7 vulnerabilities and has 96 fixes is now available. Description: The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-16995: A memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c. if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d (bnc#1152685). - CVE-2019-16233: drivers/scsi/qla2xxx/qla_os.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150457). - CVE-2019-17666: rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c lacked a certain upper-bound check, leading to a buffer overflow (bnc#1154372). - CVE-2019-16232: drivers/net/wireless/marvell/libertas/if_sdio.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150465). - CVE-2019-16234: drivers/net/wireless/intel/iwlwifi/pcie/trans.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150452). - CVE-2019-17133: cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c did not reject a long SSID IE, leading to a Buffer Overflow (bnc#1153158). - CVE-2019-17056: llcp_sock_create in net/nfc/llcp_sock.c in the AF_NFC network module did not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-3a359798b176 (bnc#1152788). The following non-security bugs were fixed: - 9p: avoid attaching writeback_fid on mmap with type PRIVATE (bsc#1051510). - ACPI / CPPC: do not require the _PSD method (bsc#1051510). - ACPI: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() (bsc#1051510). - ACPI / processor: do not print errors for processorIDs == 0xff (bsc#1051510). - act_mirred: Fix mirred_init_module error handling (bsc#1051510). - Add Acer Aspire Ethos 8951G model quirk (bsc#1051510). - Add kernel module compression support (bsc#1135854) - ALSA: hda - Add a quirk model for fixing Huawei Matebook X right speaker (bsc#1051510). - ALSA: hda: Add Elkhart Lake PCI ID (bsc#1051510). - ALSA: hda - Add laptop imic fixup for ASUS M9V laptop (bsc#1051510). - ALSA: hda: Add support of Zhaoxin controller (bsc#1051510). - ALSA: hda: Add Tigerlake/Jasperlake PCI ID (bsc#1051510). - ALSA: hda - Apply AMD controller workaround for Raven platform (bsc#1051510). - ALSA: hda - Define a fallback_pin_fixup_tbl for alc269 family (bsc#1051510). - ALSA: hda - Drop unsol event handler for Intel HDMI codecs (bsc#1051510). - ALSA: hda - Expand pin_match function to match upcoming new tbls (bsc#1051510). - ALSA: hda: Flush interrupts on disabling (bsc#1051510). - ALSA: hda - Force runtime PM on Nvidia HDMI codecs (bsc#1051510). - ALSA: hda/hdmi - Do not report spurious jack state changes (bsc#1051510). - ALSA: hda/hdmi: remove redundant assignment to variable pcm_idx (bsc#1051510). - ALSA: hda - Inform too slow responses (bsc#1051510). - ALSA: hda/realtek - Add support for ALC711 (bsc#1051510). - ALSA: hda/realtek - Blacklist PC beep for Lenovo ThinkCentre M73/93 (bsc#1051510). - ALSA: hda/realtek - Check beep whitelist before assigning in all codecs (bsc#1051510). - ALSA: hda/realtek - Enable headset mic on Asus MJ401TA (bsc#1051510). - ALSA: hda/realtek - Fix alienware headset mic (bsc#1051510). - ALSA: hda/realtek - PCI quirk for Medion E4254 (bsc#1051510). - ALSA: hda/realtek: Reduce the Headphone static noise on XPS 9350/9360 (bsc#1051510). - ALSA: hda: Set fifo_size for both playback and capture streams (bsc#1051510). - ALSA: hda - Show the fatal CORB/RIRB error more clearly (bsc#1051510). - ALSA: hda/sigmatel - remove unused variable 'stac9200_core_init' (bsc#1051510). - ALSA: i2c: ak4xxx-adda: Fix a possible null pointer dereference in build_adc_controls() (bsc#1051510). - ALSA: line6: sizeof (byte) is always 1, use that fact (bsc#1051510). - ALSA: usb-audio: Add DSD support for EVGA NU Audio (bsc#1051510). - ALSA: usb-audio: Add Hiby device family to quirks for native DSD support (bsc#1051510). - ALSA: usb-audio: Add Pioneer DDJ-SX3 PCM quirck (bsc#1051510). - ALSA: usb-audio: Clean up check_input_term() (bsc#1051510). - ALSA: usb-audio: Disable quirks for BOSS Katana amplifiers (bsc#1051510). - ALSA: usb-audio: DSD auto-detection for Playback Designs (bsc#1051510). - ALSA: usb-audio: fix PCM device order (bsc#1051510). - ALSA: usb-audio: Fix possible NULL dereference at create_yamaha_midi_quirk() (bsc#1051510). - ALSA: usb-audio: More validations of descriptor units (bsc#1051510). - ALSA: usb-audio: remove some dead code (bsc#1051510). - ALSA: usb-audio: Remove superfluous bLength checks (bsc#1051510). - ALSA: usb-audio: Simplify parse_audio_unit() (bsc#1051510). - ALSA: usb-audio: Skip bSynchAddress endpoint check if it is invalid (bsc#1051510). - ALSA: usb-audio: Unify audioformat release code (bsc#1051510). - ALSA: usb-audio: Unify the release of usb_mixer_elem_info objects (bsc#1051510). - ALSA: usb-audio: Update DSD support quirks for Oppo and Rotel (bsc#1051510). - appletalk: enforce CAP_NET_RAW for raw sockets (bsc#1051510). - arcnet: provide a buffer big enough to actually receive packets (networking-stable-19_09_30). - ASoC: Define a set of DAPM pre/post-up events (bsc#1051510). - ASoC: dmaengine: Make the pcm->name equal to pcm->id if the name is not set (bsc#1051510). - ASoC: Intel: Fix use of potentially uninitialized variable (bsc#1051510). - ASoC: Intel: NHLT: Fix debug print format (bsc#1051510). - ASoc: rockchip: i2s: Fix RPM imbalance (bsc#1051510). - ASoC: rsnd: Reinitialize bit clock inversion flag for every format setting (bsc#1051510). - ASoC: sgtl5000: Fix charge pump source assignment (bsc#1051510). - auxdisplay: panel: need to delete scan_timer when misc_register fails in panel_attach (bsc#1051510). - ax25: enforce CAP_NET_RAW for raw sockets (bsc#1051510). - Blacklist "signal: Correct namespace fixups of si_pid and si_uid" (bsc#1142667) - blk-wbt: abstract out end IO completion handler (bsc#1135873). - blk-wbt: fix has-sleeper queueing check (bsc#1135873). - blk-wbt: improve waking of tasks (bsc#1135873). - blk-wbt: move disable check into get_limit() (bsc#1135873). - blk-wbt: use wq_has_sleeper() for wq active check (bsc#1135873). - block: add io timeout to sysfs (bsc#1148410). - block: add io timeout to sysfs (bsc#1148410). - block: do not show io_timeout if driver has no timeout handler (bsc#1148410). - block: do not show io_timeout if driver has no timeout handler (bsc#1148410). - bluetooth: btrtl: Additional Realtek 8822CE Bluetooth devices (bsc#1051510). - bnx2x: Fix VF's VLAN reconfiguration in reload (bsc#1086323 ). - bnxt_en: Add PCI IDs for 57500 series NPAR devices (bsc#1153607). - bpf: fix use after free in prog symbol exposure (bsc#1083647). - bridge/mdb: remove wrong use of NLM_F_MULTI (networking-stable-19_09_15). - btrfs: bail out gracefully rather than BUG_ON (bsc#1153646). - btrfs: block-group: Fix a memory leak due to missing btrfs_put_block_group() (bsc#1155178). - btrfs: check for the full sync flag while holding the inode lock during fsync (bsc#1153713). - btrfs: Ensure btrfs_init_dev_replace_tgtdev sees up to date values (bsc#1154651). - btrfs: Ensure replaced device does not have pending chunk allocation (bsc#1154607). - btrfs: qgroup: Always free PREALLOC META reserve in btrfs_delalloc_release_extents() (bsc#1155179). - btrfs: remove wrong use of volume_mutex from btrfs_dev_replace_start (bsc#1154651). - btrfs: tracepoints: Fix bad entry members of qgroup events (bsc#1155186). - btrfs: tracepoints: Fix wrong parameter order for qgroup events (bsc#1155184). - can: mcp251x: mcp251x_hw_reset(): allow more time after a reset (bsc#1051510). - can: xilinx_can: xcan_probe(): skip error message on deferred probe (bsc#1051510). - cdc_ether: fix rndis support for Mediatek based smartphones (networking-stable-19_09_15). - cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize (bsc#1051510). - ceph: fix directories inode i_blkbits initialization (bsc#1153717). - ceph: reconnect connection if session hang in opening state (bsc#1153718). - ceph: update the mtime when truncating up (bsc#1153719). - cfg80211: add and use strongly typed element iteration macros (bsc#1051510). - cfg80211: Purge frame registrations on iftype change (bsc#1051510). - clk: at91: select parent if main oscillator or bypass is enabled (bsc#1051510). - clk: qoriq: Fix -Wunused-const-variable (bsc#1051510). - clk: sirf: Do not reference clk_init_data after registration (bsc#1051510). - clk: zx296718: Do not reference clk_init_data after registration (bsc#1051510). - crypto: af_alg - consolidation of duplicate code (bsc#1154737). - crypto: af_alg - fix race accessing cipher request (bsc#1154737). - crypto: af_alg - Fix race around ctx->rcvused by making it atomic_t (bsc#1154737). - crypto: af_alg - Initialize sg_num_bytes in error code path (bsc#1051510). - crypto: af_alg - remove locking in async callback (bsc#1154737). - crypto: af_alg - update correct dst SGL entry (bsc#1051510). - crypto: af_alg - wait for data at beginning of recvmsg (bsc#1154737). - crypto: algif_aead - copy AAD from src to dst (bsc#1154737). - crypto: algif_aead - fix reference counting of null skcipher (bsc#1154737). - crypto: algif_aead - overhaul memory management (bsc#1154737). - crypto: algif_aead - skip SGL entries with NULL page (bsc#1154737). - crypto: algif - return error code when no data was processed (bsc#1154737). - crypto: algif_skcipher - overhaul memory management (bsc#1154737). - crypto: talitos - fix missing break in switch statement (bsc#1142635). - cxgb4: do not dma memory off of the stack (bsc#1152790). - cxgb4: fix endianness for vlan value in cxgb4_tc_flower (bsc#1064802 bsc#1066129). - cxgb4:Fix out-of-bounds MSI-X info array access (networking-stable-19_10_05). - cxgb4: offload VLAN flows regardless of VLAN ethtype (bsc#1064802 bsc#1066129). - cxgb4: reduce kernel stack usage in cudbg_collect_mem_region() (bsc#1073513). - cxgb4: Signedness bug in init_one() (bsc#1097585 bsc#1097586 bsc#1097587 bsc#1097588 bsc#1097583 bsc#1097584). - cxgb4: smt: Add lock for atomic_dec_and_test (bsc#1064802 bsc#1066129). - dasd_fba: Display '00000000' for zero page when dumping sense - /dev/mem: Bail out upon SIGKILL (git-fixes). - drm: add __user attribute to ptr_to_compat() (bsc#1111666). - drm/amd/display: fix issue where 252-255 values are clipped (bsc#1111666). - drm/amd/display: reprogram VM config when system resume (bsc#1111666). - drm/amd/display: Restore backlight brightness after system resume (bsc#1112178) - drm/amd/display: support spdif (bsc#1111666). - drm/amd/dm: Understand why attaching path/tile properties are needed (bsc#1111666). - drm/amdgpu: Check for valid number of registers to read (bsc#1051510). - drm/amdgpu: Fix KFD-related kernel oops on Hawaii (bsc#1111666). - drm/amdgpu/gfx9: Update gfx9 golden settings (bsc#1111666). - drm/amdgpu/si: fix ASIC tests (git-fixes). - drm/amdgpu: Update gc_9_0 golden settings (bsc#1111666). - drm/amdkfd: Add missing Polaris10 ID (bsc#1111666). - drm/amd/powerplay/smu7: enforce minimal VBITimeout (v2) (bsc#1051510). - drm/amd/pp: Fix truncated clock value when set watermark (bsc#1111666). - drm/ast: Fixed reboot test may cause system hanged (bsc#1051510). - drm/atomic_helper: Allow DPMS On<->Off changes for unregistered connectors (bsc#1111666). - drm/atomic_helper: Disallow new modesets on unregistered connectors (bsc#1111666). - drm/atomic_helper: Stop modesets on unregistered connectors harder (bsc#1111666). - drm/bridge: tc358767: Increase AUX transfer length limit (bsc#1051510). - drm/bridge: tfp410: fix memleak in get_modes() (bsc#1111666). - drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50 (bsc#1051510). - drm: Flush output polling on shutdown (bsc#1051510). - drm/i915: Cleanup gt powerstate from gem (bsc#1111666). - drm/i915: Fix intel_dp_mst_best_encoder() (bsc#1111666). - drm/i915/gvt: update vgpu workload head pointer correctly (bsc#1112178) - drm/i915: Restore sane defaults for KMS on GEM error load (bsc#1111666). - drm/mediatek: set DMA max segment size (bsc#1111666). - drm/msm/dsi: Fix return value check for clk_get_parent (bsc#1111666). - drm/msm/dsi: Implement reset correctly (bsc#1051510). - drm/nouveau/disp/nv50-: fix center/aspect-corrected scaling (bsc#1111666). - drm/nouveau/kms/nv50-: Do not create MSTMs for eDP connectors (bsc#1112178) - drm/nouveau/volt: Fix for some cards having 0 maximum voltage (bsc#1111666). - drm/omap: fix max fclk divider for omap36xx (bsc#1111666). - drm/panel: check failure cases in the probe func (bsc#1111666). - drm/panel: make drm_panel.h self-contained (bsc#1111666). - drm: panel-orientation-quirks: Add extra quirk table entry for GPD MicroPC (bsc#1111666). - drm/panel: simple: fix AUO g185han01 horizontal blanking (bsc#1051510). - drm/radeon: Bail earlier when radeon.cik_/si_support=0 is passed (bsc#1111666). - drm/radeon: Fix EEH during kexec (bsc#1051510). - drm: rcar-du: lvds: Fix bridge_to_rcar_lvds (bsc#1111666). - drm/rockchip: Check for fast link training before enabling psr (bsc#1111666). - drm/stm: attach gem fence to atomic state (bsc#1111666). - drm/tilcdc: Register cpufreq notifier after we have initialized crtc (bsc#1051510). - drm/vmwgfx: Fix double free in vmw_recv_msg() (bsc#1051510). - e1000e: add workaround for possible stalled packet (bsc#1051510). - efi/arm: Show SMBIOS bank/device location in CPER and GHES error logs (bsc#1152033). - efi: cper: print AER info of PCIe fatal error (bsc#1051510). - efi/memattr: Do not bail on zero VA if it equals the region's PA (bsc#1051510). - efivar/ssdt: Do not iterate over EFI vars if no SSDT override was specified (bsc#1051510). - firmware: dmi: Fix unlikely out-of-bounds read in save_mem_devices (git-fixes). - Fix AMD IOMMU kABI (bsc#1154610). - Fix KVM kABI after x86 mmu backports (bsc#1117665). - gpu: drm: radeon: Fix a possible null-pointer dereference in radeon_connector_set_property() (bsc#1051510). - HID: apple: Fix stuck function keys when using FN (bsc#1051510). - HID: fix error message in hid_open_report() (bsc#1051510). - HID: hidraw: Fix invalid read in hidraw_ioctl (bsc#1051510). - HID: logitech: Fix general protection fault caused by Logitech driver (bsc#1051510). - HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy() (bsc#1051510). - HID: prodikeys: Fix general protection fault during probe (bsc#1051510). - HID: sony: Fix memory corruption issue on cleanup (bsc#1051510). - hso: fix NULL-deref on tty open (bsc#1051510). - hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap' (bsc#1051510). - hwrng: core - do not wait on add_early_randomness() (git-fixes). - i2c: riic: Clear NACK in tend isr (bsc#1051510). - IB/core, ipoib: Do not overreact to SM LID change event (bsc#1154108) - IB/hfi1: Remove overly conservative VM_EXEC flag check (bsc#1144449). - IB/mlx5: Consolidate use_umr checks into single function (bsc#1093205). - IB/mlx5: Fix MR re-registration flow to use UMR properly (bsc#1093205). - IB/mlx5: Report correctly tag matching rendezvous capability (bsc#1046305). - ieee802154: atusb: fix use-after-free at disconnect (bsc#1051510). - ieee802154: ca8210: prevent memory leak (bsc#1051510). - ieee802154: enforce CAP_NET_RAW for raw sockets (bsc#1051510). - iio: adc: ad799x: fix probe error handling (bsc#1051510). - iio: light: opt3001: fix mutex unlock race (bsc#1051510). - ima: always return negative code for error (bsc#1051510). - Input: da9063 - fix capability and drop KEY_SLEEP (bsc#1051510). - Input: synaptics-rmi4 - avoid processing unknown IRQs (bsc#1051510). - iommu/amd: Apply the same IVRS IOAPIC workaround to Acer Aspire A315-41 (bsc#1137799). - iommu/amd: Check PM_LEVEL_SIZE() condition in locked section (bsc#1154608). - iommu/amd: Override wrong IVRS IOAPIC on Raven Ridge systems (bsc#1137799). - iommu/amd: Remove domain->updated (bsc#1154610). - iommu/amd: Wait for completion of IOTLB flush in attach_device (bsc#1154611). - ipmi_si: Only schedule continuously in the thread in maintenance mode (bsc#1051510). - ipv6: drop incoming packets having a v4mapped source address (networking-stable-19_10_05). - ipv6: Fix the link time qualifier of 'ping_v6_proc_exit_net()' (networking-stable-19_09_15). - ipv6: Handle missing host route in __ipv6_ifa_notify (networking-stable-19_10_05). - iwlwifi: pcie: fix memory leaks in iwl_pcie_ctxt_info_gen3_init (bsc#1111666). - ixgbe: Fix secpath usage for IPsec TX offload (bsc#1113994 bsc#1151807). - ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (bsc#1101674). - ixgbe: sync the first fragment unconditionally (bsc#1133140). - kabi: net: sched: act_sample: fix psample group handling on overwrite (networking-stable-19_09_05). - kABI workaround for crypto/af_alg changes (bsc#1154737). - kABI workaround for drm_connector.registered type changes (bsc#1111666). - kABI workaround for snd_hda_pick_pin_fixup() changes (bsc#1051510). - kernel-binary.spec.in: Fix build of non-modular kernels (boo#1154578). - kernel-subpackage-build: create zero size ghost for uncompressed vmlinux (bsc#1154354). - kernel/sysctl.c: do not override max_threads provided by userspace (bnc#1150875). - ksm: cleanup stable_node chain collapse case (bnc#1144338). - ksm: fix use after free with merge_across_nodes = 0 (bnc#1144338). - ksm: introduce ksm_max_page_sharing per page deduplication limit (bnc#1144338). - ksm: optimize refile of stable_node_dup at the head of the chain (bnc#1144338). - ksm: swap the two output parameters of chain/chain_prune (bnc#1144338). - kvm: Convert kvm_lock to a mutex (bsc#1117665). - kvm: MMU: drop vcpu param in gpte_access (bsc#1117665). - kvm: PPC: Book3S HV: use smp_mb() when setting/clearing host_ipi flag (bsc#1061840). - kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (bsc#1117665). - kvm: x86: adjust kvm_mmu_page member to save 8 bytes (bsc#1117665). - kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (bsc#1117665). - kvm: x86: Do not release the page inside mmu_set_spte() (bsc#1117665). - kvm: x86: make FNAME(fetch) and __direct_map more similar (bsc#1117665). - kvm: x86, powerpc: do not allow clearing largepages debugfs entry (bsc#1117665). - kvm: x86: remove now unneeded hugepage gfn adjustment (bsc#1117665). - libertas: Add missing sentinel at end of if_usb.c fw_table (bsc#1051510). - lib/mpi: Fix karactx leak in mpi_powm (bsc#1051510). - libnvdimm/security: provide fix for secure-erase to use zero-key (bsc#1149853). - lpfc: Add additional discovery log messages (bsc#1154521). - lpfc: Add FA-WWN Async Event reporting (bsc#1154521). - lpfc: Add FC-AL support to lpe32000 models (bsc#1154521). - lpfc: Add log macros to allow print by serverity or verbocity setting (bsc#1154521). - lpfc: Fix bad ndlp ptr in xri aborted handling (bsc#1154521). - lpfc: fix coverity error of dereference after null check (bsc#1154521). - lpfc: Fix hardlockup in lpfc_abort_handler (bsc#1154521). - lpfc: Fix lockdep errors in sli_ringtx_put (bsc#1154521). - lpfc: fix lpfc_nvmet_mrq to be bound by hdw queue count (bsc#1154521). - lpfc: Fix reporting of read-only fw error errors (bsc#1154521). - lpfc: Fix SLI3 hba in loop mode not discovering devices (bsc#1154521). - lpfc: Make FW logging dynamically configurable (bsc#1154521). - lpfc: Remove lock contention target write path (bsc#1154521). - lpfc: Revise interrupt coalescing for missing scenarios (bsc#1154521). - lpfc: Slight fast-path Performance optimizations (bsc#1154521). - lpfc: Update lpfc version to 12.6.0.0 (bsc#1154521). - mac80211: accept deauth frames in IBSS mode (bsc#1051510). - mac80211: fix txq null pointer dereference (bsc#1051510). - mac80211: Reject malformed SSID elements (bsc#1051510). - macsec: drop skb sk before calling gro_cells_receive (bsc#1051510). - media: atmel: atmel-isc: fix asd memory allocation (bsc#1135642). - media: cpia2_usb: fix memory leaks (bsc#1051510). - media: dvb-core: fix a memory leak bug (bsc#1051510). - media: exynos4-is: fix leaked of_node references (bsc#1051510). - media: gspca: zero usb_buf on error (bsc#1051510). - media: hdpvr: Add device num check and handling (bsc#1051510). - media: hdpvr: add terminating 0 at end of string (bsc#1051510). - media: i2c: ov5645: Fix power sequence (bsc#1051510). - media: iguanair: add sanity checks (bsc#1051510). - media: omap3isp: Do not set streaming state on random subdevs (bsc#1051510). - media: omap3isp: Set device on omap3isp subdevs (bsc#1051510). - media: ov9650: add a sanity check (bsc#1051510). - media: radio/si470x: kill urb on error (bsc#1051510). - media: saa7134: fix terminology around saa7134_i2c_eeprom_md7134_gate() (bsc#1051510). - media: saa7146: add cleanup in hexium_attach() (bsc#1051510). - media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table (bsc#1051510). - media: stkwebcam: fix runtime PM after driver unbind (bsc#1051510). - media: ttusb-dec: Fix info-leak in ttusb_dec_send_command() (bsc#1051510). - memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()' (bsc#1051510). - mfd: intel-lpss: Remove D3cold delay (bsc#1051510). - mISDN: enforce CAP_NET_RAW for raw sockets (bsc#1051510). - mld: fix memory leak in mld_del_delrec() (networking-stable-19_09_05). - mmc: sdhci: Fix incorrect switch to HS mode (bsc#1051510). - mmc: sdhci: improve ADMA error reporting (bsc#1051510). - mmc: sdhci-of-esdhc: set DMA snooping based on DMA coherence (bsc#1051510). - netfilter: nf_nat: do not bug when mapping already exists (bsc#1146612). - net: Fix null de-reference of device refcount (networking-stable-19_09_15). - net: fix skb use after free in netpoll (networking-stable-19_09_05). - net: gso: Fix skb_segment splat when splitting gso_size mangled skb having linear-headed frag_list (networking-stable-19_09_15). - net/ibmvnic: Fix EOI when running in XIVE mode (bsc#1089644, ltc#166495, ltc#165544, git-fixes). - net/mlx4_en: fix a memory leak bug (bsc#1046299). - net/mlx5: Add device ID of upcoming BlueField-2 (bsc#1046303 ). - net/mlx5: Fix error handling in mlx5_load() (bsc#1046305 ). - net/phy: fix DP83865 10 Mbps HDX loopback disable function (networking-stable-19_09_30). - net: qlogic: Fix memory leak in ql_alloc_large_buffers (networking-stable-19_10_05). - net: qrtr: Stop rx_worker before freeing node (networking-stable-19_09_30). - net/rds: Fix error handling in rds_ib_add_one() (networking-stable-19_10_05). - net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848). - net/rds: remove user triggered WARN_ON in rds_sendmsg (bsc#1154848). - net: Replace NF_CT_ASSERT() with WARN_ON() (bsc#1146612). - net/sched: act_sample: do not push mac header on ip6gre ingress (networking-stable-19_09_30). - net: sched: act_sample: fix psample group handling on overwrite (networking-stable-19_09_05). - net_sched: add policy validation for action attributes (networking-stable-19_09_30). - net_sched: fix backward compatibility for TCA_ACT_KIND (git-fixes). - net: stmmac: dwmac-rk: Do not fail if phy regulator is absent (networking-stable-19_09_05). - net: Unpublish sk from sk_reuseport_cb before call_rcu (networking-stable-19_10_05). - nfc: fix attrs checks in netlink interface (bsc#1051510). - nfc: fix memory leak in llcp_sock_bind() (bsc#1051510). - nfc: pn533: fix use-after-free and memleaks (bsc#1051510). - NFSv4.1 - backchannel request should hold ref on xprt (bsc#1152624). - nl80211: fix null pointer dereference (bsc#1051510). - objtool: Clobber user CFLAGS variable (bsc#1153236). - openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC (networking-stable-19_09_30). - packaging: add support for riscv64 - PCI: Correct pci=resource_alignment parameter example (bsc#1051510). - PCI: dra7xx: Fix legacy INTD IRQ handling (bsc#1087092). - PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (bsc#1153263). - PCI: PM: Fix pci_power_up() (bsc#1051510). - pinctrl: cherryview: restore Strago DMI workaround for all versions (bsc#1111666). - pinctrl: tegra: Fix write barrier placement in pmx_writel (bsc#1051510). - platform/x86: classmate-laptop: remove unused variable (bsc#1051510). - platform/x86: i2c-multi-instantiate: Derive the device name from parent (bsc#1111666). - platform/x86: i2c-multi-instantiate: Fail the probe if no IRQ provided (bsc#1111666). - platform/x86: pmc_atom: Add Siemens SIMATIC IPC277E to critclk_systems DMI table (bsc#1051510). - powerpc/64s/pseries: radix flush translations before MMU is enabled at boot (bsc#1055186). - powerpc/64s/radix: keep kernel ERAT over local process/guest invalidates (bsc#1055186). - powerpc/64s/radix: tidy up TLB flushing code (bsc#1055186). - powerpc/64s: Rename PPC_INVALIDATE_ERAT to PPC_ISA_3_0_INVALIDATE_ERAT (bsc#1055186). - powerpc/mm/book3s64: Move book3s64 code to pgtable-book3s64 (bsc#1055186). - powerpc/mm: mark more tlb functions as __always_inline (bsc#1055186). - powerpc/mm: Properly invalidate when setting process table base (bsc#1055186). - powerpc/mm/radix: mark as __tlbie_pid() and friends as__always_inline (bsc#1055186). - powerpc/mm/radix: mark __radix__flush_tlb_range_psize() as __always_inline (bsc#1055186). - powerpc/pseries/mobility: use cond_resched when updating device tree (bsc#1153112 ltc#181778). - powerpc/pseries: Remove confusing warning message (bsc#1109158). - powerpc/rtas: allow rescheduling while changing cpu states (bsc#1153112 ltc#181778). - powerplay: Respect units on max dcfclk watermark (bsc#1111666). - power: supply: sysfs: ratelimit property read error message (bsc#1051510). - qed: iWARP - Fix default window size to be based on chip (bsc#1050536 bsc#1050545). - qed: iWARP - Fix tc for MPA ll2 connection (bsc#1050536 bsc#1050545). - qed: iWARP - fix uninitialized callback (bsc#1050536 bsc#1050545). - qed: iWARP - Use READ_ONCE and smp_store_release to access ep->state (bsc#1050536 bsc#1050545). - qmi_wwan: add support for Cinterion CLS8 devices (networking-stable-19_10_05). - r8152: Set macpassthru in reset_resume callback (bsc#1051510). - RDMA/bnxt_re: Fix spelling mistake "missin_resp" -> "missing_resp" (bsc#1050244). - RDMA: Fix goto target to release the allocated memory (bsc#1050244). - rds: Fix warning (bsc#1154848). - Revert "drm/amd/display: Fix underscan not using proper scaling" (bsc#1111666). - Revert "drm/amd/powerplay: Enable/Disable NBPSTATE on On/OFF of UVD" (bsc#1111666). - Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510). - rtlwifi: rtl8192cu: Fix value set in descriptor (bsc#1142635). - s390/cmf: set_schib_wait add timeout (bsc#1153509, bsc#1153476). - s390/crypto: fix gcm-aes-s390 selftest failures (bsc#1137861 LTC#178091). - sch_cbq: validate TCA_CBQ_WRROPT to avoid crash (networking-stable-19_10_05). - sch_dsmark: fix potential NULL deref in dsmark_init() (networking-stable-19_10_05). - sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero (networking-stable-19_09_15). - sch_netem: fix a divide by zero in tabledist() (networking-stable-19_09_30). - scsi: lpfc: Check queue pointer before use (bsc#1154242). - scsi: lpfc: cleanup: remove unused fcp_txcmlpq_cnt (bsc#1154521). - scsi: lpfc: Complete removal of FCoE T10 PI support on SLI-4 adapters (bsc#1154521). - scsi: lpfc: Convert existing %pf users to %ps (bsc#1154521). - scsi: lpfc: Fix coverity errors on NULL pointer checks (bsc#1154521). - scsi: lpfc: Fix device recovery errors after PLOGI failures (bsc#1154521). - scsi: lpfc: Fix devices that do not return after devloss followed by rediscovery (bsc#1137040). - scsi: lpfc: Fix discovery failures when target device connectivity bounces (bsc#1154521). - scsi: lpfc: Fix GPF on scsi command completion (bsc#1154521). - scsi: lpfc: Fix hdwq sgl locks and irq handling (bsc#1154521). - scsi: lpfc: Fix host hang at boot or slow boot (bsc#1154521). - scsi: lpfc: Fix list corruption detected in lpfc_put_sgl_per_hdwq (bsc#1154521). - scsi: lpfc: Fix list corruption in lpfc_sli_get_iocbq (bsc#1154521). - scsi: lpfc: Fix locking on mailbox command completion (bsc#1154521). - scsi: lpfc: Fix miss of register read failure check (bsc#1154521). - scsi: lpfc: Fix null ptr oops updating lpfc_devloss_tmo via sysfs attribute (bsc#1140845). - scsi: lpfc: Fix NVMe ABTS in response to receiving an ABTS (bsc#1154521). - scsi: lpfc: Fix NVME io abort failures causing hangs (bsc#1154521). - scsi: lpfc: Fix premature re-enabling of interrupts in lpfc_sli_host_down (bsc#1154521). - scsi: lpfc: Fix propagation of devloss_tmo setting to nvme transport (bsc#1140883). - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (bsc#1154521). - scsi: lpfc: Fix rpi release when deleting vport (bsc#1154521). - scsi: lpfc: Fix spinlock_irq issues in lpfc_els_flush_cmd() (bsc#1154521). - scsi: lpfc: Make function lpfc_defer_pt2pt_acc static (bsc#1154521). - scsi: lpfc: Remove bg debugfs buffers (bsc#1144375). - scsi: lpfc: remove left-over BUILD_NVME defines (bsc#1154268). - scsi: lpfc: Update async event logging (bsc#1154521). - scsi: lpfc: Update lpfc version to 12.4.0.1 (bsc#1154521). - scsi: qedf: fc_rport_priv reference counting fixes (bsc#1098291). - scsi: qedf: Modify abort and tmf handler to handle edge condition and flush (bsc#1098291). - scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Fix N2N link reset (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Fix N2N link up fail (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Fix stale mem access on driver unload (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Fix unbound sleep in fcport delete path (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Fix wait condition in loop (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Improve logging for scan thread (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Optimize NPIV tear down process (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: remove redundant assignment to pointer host (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Set remove flag for all VP (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Silence fwdump template message (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: qla2xxx: Update driver version to 10.01.00.20-k (bsc#1143706 bsc#1082635 bsc#1123034). - scsi: storvsc: setup 1:1 mapping between hardware queue and CPU queue (bsc#1140729). - sctp: Fix the link time qualifier of 'sctp_ctrlsock_exit()' (networking-stable-19_09_15). - sctp: use transport pf_retrans in sctp_do_8_2_transport_strike (networking-stable-19_09_15). - Sign non-x86 kernels when possible (boo#1134303) - skge: fix checksum byte order (networking-stable-19_09_30). - sock_diag: fix autoloading of the raw_diag module (bsc#1152791). - sock_diag: request _diag module only when the family or proto has been registered (bsc#1152791). - staging: bcm2835-audio: Fix draining behavior regression (bsc#1111666). - staging: vt6655: Fix memory leak in vt6655_probe (bsc#1051510). - staging: wlan-ng: fix exit return when sme->key_idx >= NUM_WEPKEYS (bsc#1051510). - tcp: Do not dequeue SYN/FIN-segments from write-queue (git-gixes). - tcp: fix tcp_ecn_withdraw_cwr() to clear TCP_ECN_QUEUE_CWR (networking-stable-19_09_15). - tcp: inherit timestamp on mtu probe (networking-stable-19_09_05). - tcp: remove empty skb from write queue in error cases (networking-stable-19_09_05). - thermal: Fix use-after-free when unregistering thermal zone device (bsc#1051510). - thermal_hwmon: Sanitize thermal_zone type (bsc#1051510). - tipc: add NULL pointer check before calling kfree_rcu (networking-stable-19_09_15). - tipc: fix unlimited bundling of small messages (networking-stable-19_10_05). - tracing: Initialize iter->seq after zeroing in tracing_read_pipe() (bsc#1151508). - tun: fix use-after-free when register netdev failed (networking-stable-19_09_15). - tuntap: correctly set SOCKWQ_ASYNC_NOSPACE (bsc#1145099). - Update patches.suse/NFSv4-Check-the-return-value-of-update_open_stateid.patch (boo#1154189 bsc#1154747). - usb: adutux: fix NULL-derefs on disconnect (bsc#1142635). - usb: adutux: fix use-after-free on disconnect (bsc#1142635). - usb: adutux: fix use-after-free on release (bsc#1051510). - usb: chaoskey: fix use-after-free on release (bsc#1051510). - usb: dummy-hcd: fix power budget for SuperSpeed mode (bsc#1051510). - usb: iowarrior: fix use-after-free after driver unbind (bsc#1051510). - usb: iowarrior: fix use-after-free on disconnect (bsc#1051510). - usb: iowarrior: fix use-after-free on release (bsc#1051510). - usb: ldusb: fix memleak on disconnect (bsc#1051510). - usb: ldusb: fix NULL-derefs on driver unbind (bsc#1051510). - usb: ldusb: fix read info leaks (bsc#1051510). - usb: legousbtower: fix a signedness bug in tower_probe() (bsc#1051510). - usb: legousbtower: fix deadlock on disconnect (bsc#1142635). - usb: legousbtower: fix memleak on disconnect (bsc#1051510). - usb: legousbtower: fix open after failed reset request (bsc#1142635). - usb: legousbtower: fix potential NULL-deref on disconnect (bsc#1142635). - usb: legousbtower: fix slab info leak at probe (bsc#1142635). - usb: legousbtower: fix use-after-free on release (bsc#1051510). - usb: microtek: fix info-leak at probe (bsc#1142635). - usbnet: ignore endpoints with invalid wMaxPacketSize (bsc#1051510). - usbnet: sanity checking of packet sizes and device mtu (bsc#1051510). - usb: serial: fix runtime PM after driver unbind (bsc#1051510). - usb: serial: ftdi_sio: add device IDs for Sienna and Echelon PL-20 (bsc#1051510). - usb: serial: keyspan: fix NULL-derefs on open() and write() (bsc#1051510). - usb: serial: option: add support for Cinterion CLS8 devices (bsc#1051510). - usb: serial: option: add Telit FN980 compositions (bsc#1051510). - usb: serial: ti_usb_3410_5052: fix port-close races (bsc#1051510). - usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510). - usb: usblcd: fix I/O after disconnect (bsc#1142635). - usb: usblp: fix runtime PM after driver unbind (bsc#1051510). - usb: usblp: fix use-after-free on disconnect (bsc#1051510). - usb: usb-skeleton: fix NULL-deref on disconnect (bsc#1051510). - usb: usb-skeleton: fix runtime PM after driver unbind (bsc#1051510). - usb: usb-skeleton: fix use-after-free after driver unbind (bsc#1051510). - usb: xhci: wait for CNR controller not ready bit in xhci resume (bsc#1051510). - usb: yurex: Do not retry on unexpected errors (bsc#1051510). - usb: yurex: fix NULL-derefs on disconnect (bsc#1051510). - vfio_pci: Restore original state on release (bsc#1051510). - vhost_net: conditionally enable tx polling (bsc#1145099). - video: of: display_timing: Add of_node_put() in of_get_display_timing() (bsc#1051510). - vsock: Fix a lockdep warning in __vsock_release() (networking-stable-19_10_05). - watchdog: imx2_wdt: fix min() calculation in imx2_wdt_set_timeout (bsc#1051510). - x86/asm: Fix MWAITX C-state hint value (bsc#1114279). - x86/boot/64: Make level2_kernel_pgt pages invalid outside kernel area (bnc#1153969). - x86/boot/64: Round memory hole size up to next PMD page (bnc#1153969). - x86/mm: Use WRITE_ONCE() when setting PTEs (bsc#1114279). - xen/netback: fix error path of xenvif_connect_data() (bsc#1065600). - xen/pv: Fix Xen PV guest int3 handling (bsc#1153811). - xhci: Check all endpoints for LPM timeout (bsc#1051510). - xhci: Fix false warning message about wrong bounce buffer write length (bsc#1051510). - xhci: Increase STS_SAVE timeout in xhci_suspend() (bsc#1051510). - xhci: Prevent device initiated U1/U2 link pm if exit latency is too long (bsc#1051510). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2444=1 Package List: - openSUSE Leap 15.1 (noarch): kernel-devel-4.12.14-lp151.28.25.1 kernel-docs-4.12.14-lp151.28.25.1 kernel-docs-html-4.12.14-lp151.28.25.1 kernel-macros-4.12.14-lp151.28.25.1 kernel-source-4.12.14-lp151.28.25.1 kernel-source-vanilla-4.12.14-lp151.28.25.1 - openSUSE Leap 15.1 (x86_64): kernel-debug-4.12.14-lp151.28.25.1 kernel-debug-base-4.12.14-lp151.28.25.1 kernel-debug-base-debuginfo-4.12.14-lp151.28.25.1 kernel-debug-debuginfo-4.12.14-lp151.28.25.1 kernel-debug-debugsource-4.12.14-lp151.28.25.1 kernel-debug-devel-4.12.14-lp151.28.25.1 kernel-debug-devel-debuginfo-4.12.14-lp151.28.25.1 kernel-default-4.12.14-lp151.28.25.1 kernel-default-base-4.12.14-lp151.28.25.1 kernel-default-base-debuginfo-4.12.14-lp151.28.25.1 kernel-default-debuginfo-4.12.14-lp151.28.25.1 kernel-default-debugsource-4.12.14-lp151.28.25.1 kernel-default-devel-4.12.14-lp151.28.25.1 kernel-default-devel-debuginfo-4.12.14-lp151.28.25.1 kernel-kvmsmall-4.12.14-lp151.28.25.1 kernel-kvmsmall-base-4.12.14-lp151.28.25.1 kernel-kvmsmall-base-debuginfo-4.12.14-lp151.28.25.1 kernel-kvmsmall-debuginfo-4.12.14-lp151.28.25.1 kernel-kvmsmall-debugsource-4.12.14-lp151.28.25.1 kernel-kvmsmall-devel-4.12.14-lp151.28.25.1 kernel-kvmsmall-devel-debuginfo-4.12.14-lp151.28.25.1 kernel-obs-build-4.12.14-lp151.28.25.1 kernel-obs-build-debugsource-4.12.14-lp151.28.25.1 kernel-obs-qa-4.12.14-lp151.28.25.1 kernel-syms-4.12.14-lp151.28.25.1 kernel-vanilla-4.12.14-lp151.28.25.1 kernel-vanilla-base-4.12.14-lp151.28.25.1 kernel-vanilla-base-debuginfo-4.12.14-lp151.28.25.1 kernel-vanilla-debuginfo-4.12.14-lp151.28.25.1 kernel-vanilla-debugsource-4.12.14-lp151.28.25.1 kernel-vanilla-devel-4.12.14-lp151.28.25.1 kernel-vanilla-devel-debuginfo-4.12.14-lp151.28.25.1 References: https://www.suse.com/security/cve/CVE-2019-16232.html https://www.suse.com/security/cve/CVE-2019-16233.html https://www.suse.com/security/cve/CVE-2019-16234.html https://www.suse.com/security/cve/CVE-2019-16995.html https://www.suse.com/security/cve/CVE-2019-17056.html https://www.suse.com/security/cve/CVE-2019-17133.html https://www.suse.com/security/cve/CVE-2019-17666.html https://bugzilla.suse.com/1046299 https://bugzilla.suse.com/1046303 https://bugzilla.suse.com/1046305 https://bugzilla.suse.com/1050244 https://bugzilla.suse.com/1050536 https://bugzilla.suse.com/1050545 https://bugzilla.suse.com/1051510 https://bugzilla.suse.com/1055186 https://bugzilla.suse.com/1061840 https://bugzilla.suse.com/1064802 https://bugzilla.suse.com/1065600 https://bugzilla.suse.com/1066129 https://bugzilla.suse.com/1073513 https://bugzilla.suse.com/1082635 https://bugzilla.suse.com/1083647 https://bugzilla.suse.com/1086323 https://bugzilla.suse.com/1087092 https://bugzilla.suse.com/1089644 https://bugzilla.suse.com/1093205 https://bugzilla.suse.com/1097583 https://bugzilla.suse.com/1097584 https://bugzilla.suse.com/1097585 https://bugzilla.suse.com/1097586 https://bugzilla.suse.com/1097587 https://bugzilla.suse.com/1097588 https://bugzilla.suse.com/1098291 https://bugzilla.suse.com/1101674 https://bugzilla.suse.com/1109158 https://bugzilla.suse.com/1111666 https://bugzilla.suse.com/1112178 https://bugzilla.suse.com/1113994 https://bugzilla.suse.com/1114279 https://bugzilla.suse.com/1117665 https://bugzilla.suse.com/1123034 https://bugzilla.suse.com/1123080 https://bugzilla.suse.com/1133140 https://bugzilla.suse.com/1134303 https://bugzilla.suse.com/1135642 https://bugzilla.suse.com/1135854 https://bugzilla.suse.com/1135873 https://bugzilla.suse.com/1137040 https://bugzilla.suse.com/1137799 https://bugzilla.suse.com/1137861 https://bugzilla.suse.com/1140729 https://bugzilla.suse.com/1140845 https://bugzilla.suse.com/1140883 https://bugzilla.suse.com/1141600 https://bugzilla.suse.com/1142635 https://bugzilla.suse.com/1142667 https://bugzilla.suse.com/1143706 https://bugzilla.suse.com/1144338 https://bugzilla.suse.com/1144375 https://bugzilla.suse.com/1144449 https://bugzilla.suse.com/1145099 https://bugzilla.suse.com/1146612 https://bugzilla.suse.com/1148410 https://bugzilla.suse.com/1149853 https://bugzilla.suse.com/1150452 https://bugzilla.suse.com/1150457 https://bugzilla.suse.com/1150465 https://bugzilla.suse.com/1150875 https://bugzilla.suse.com/1151508 https://bugzilla.suse.com/1151807 https://bugzilla.suse.com/1152033 https://bugzilla.suse.com/1152624 https://bugzilla.suse.com/1152685 https://bugzilla.suse.com/1152788 https://bugzilla.suse.com/1152790 https://bugzilla.suse.com/1152791 https://bugzilla.suse.com/1153112 https://bugzilla.suse.com/1153158 https://bugzilla.suse.com/1153236 https://bugzilla.suse.com/1153263 https://bugzilla.suse.com/1153476 https://bugzilla.suse.com/1153509 https://bugzilla.suse.com/1153607 https://bugzilla.suse.com/1153646 https://bugzilla.suse.com/1153713 https://bugzilla.suse.com/1153717 https://bugzilla.suse.com/1153718 https://bugzilla.suse.com/1153719 https://bugzilla.suse.com/1153811 https://bugzilla.suse.com/1153969 https://bugzilla.suse.com/1154108 https://bugzilla.suse.com/1154189 https://bugzilla.suse.com/1154242 https://bugzilla.suse.com/1154268 https://bugzilla.suse.com/1154354 https://bugzilla.suse.com/1154372 https://bugzilla.suse.com/1154521 https://bugzilla.suse.com/1154578 https://bugzilla.suse.com/1154607 https://bugzilla.suse.com/1154608 https://bugzilla.suse.com/1154610 https://bugzilla.suse.com/1154611 https://bugzilla.suse.com/1154651 https://bugzilla.suse.com/1154737 https://bugzilla.suse.com/1154747 https://bugzilla.suse.com/1154848 https://bugzilla.suse.com/1155178 https://bugzilla.suse.com/1155179 https://bugzilla.suse.com/1155184 https://bugzilla.suse.com/1155186 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2434-1: moderate: Security update for docker-runc
by opensuse-security＠opensuse.org 05 Nov '19

05 Nov '19

openSUSE Security Update: Security update for docker-runc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2434-1 Rating: moderate References: #1152308 Cross-References: CVE-2019-16884 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for docker-runc fixes the following issues: - CVE-2019-16884: Fixed an LSM bypass via malicious Docker images that mount over a /proc directory. (bsc#1152308) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2434=1 Package List: - openSUSE Leap 15.1 (x86_64): docker-runc-1.0.0rc8+gitr3826_425e105d5a03-lp151.3.9.1 docker-runc-debuginfo-1.0.0rc8+gitr3826_425e105d5a03-lp151.3.9.1 References: https://www.suse.com/security/cve/CVE-2019-16884.html https://bugzilla.suse.com/1152308 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2432-1: moderate: Security update for binutils
by opensuse-security＠opensuse.org 05 Nov '19

05 Nov '19

openSUSE Security Update: Security update for binutils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2432-1 Rating: moderate References: #1109412 #1109413 #1109414 #1111996 #1112534 #1112535 #1113247 #1113252 #1113255 #1116827 #1118644 #1118830 #1118831 #1120640 #1121034 #1121035 #1121056 #1133131 #1133232 #1141913 #1142772 #1152590 #1154016 #1154025 Cross-References: CVE-2018-1000876 CVE-2018-17358 CVE-2018-17359 CVE-2018-17360 CVE-2018-17985 CVE-2018-18309 CVE-2018-18483 CVE-2018-18484 CVE-2018-18605 CVE-2018-18606 CVE-2018-18607 CVE-2018-19931 CVE-2018-19932 CVE-2018-20623 CVE-2018-20651 CVE-2018-20671 CVE-2018-6323 CVE-2018-6543 CVE-2018-6759 CVE-2018-6872 CVE-2018-7208 CVE-2018-7568 CVE-2018-7569 CVE-2018-7570 CVE-2018-7642 CVE-2018-7643 CVE-2018-8945 CVE-2019-1010180 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 28 vulnerabilities is now available. Description: This update for binutils fixes the following issues: binutils was updated to current 2.32 branch [jsc#ECO-368]. Includes following security fixes: - CVE-2018-17358: Fixed invalid memory access in _bfd_stab_section_find_nearest_line in syms.c (bsc#1109412) - CVE-2018-17359: Fixed invalid memory access exists in bfd_zalloc in opncls.c (bsc#1109413) - CVE-2018-17360: Fixed heap-based buffer over-read in bfd_getl32 in libbfd.c (bsc#1109414) - CVE-2018-17985: Fixed a stack consumption problem caused by the cplus_demangle_type (bsc#1116827) - CVE-2018-18309: Fixed an invalid memory address dereference was discovered in read_reloc in reloc.c (bsc#1111996) - CVE-2018-18483: Fixed get_count function provided by libiberty that allowed attackers to cause a denial of service or other unspecified impact (bsc#1112535) - CVE-2018-18484: Fixed stack exhaustion in the C++ demangling functions provided by libiberty, caused by recursive stack frames (bsc#1112534) - CVE-2018-18605: Fixed a heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup causing a denial of service (bsc#1113255) - CVE-2018-18606: Fixed a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments, causing denial of service (bsc#1113252) - CVE-2018-18607: Fixed a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section, causing denial of service (bsc#1113247) - CVE-2018-19931: Fixed a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h (bsc#1118831) - CVE-2018-19932: Fixed an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA (bsc#1118830) - CVE-2018-20623: Fixed a use-after-free in the error function in elfcomm.c (bsc#1121035) - CVE-2018-20651: Fixed a denial of service via a NULL pointer dereference in elf_link_add_object_symbols in elflink.c (bsc#1121034) - CVE-2018-20671: Fixed an integer overflow that can trigger a heap-based buffer overflow in load_specific_debug_section in objdump.c (bsc#1121056) - CVE-2018-1000876: Fixed integer overflow in bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc in objdump (bsc#1120640) - CVE-2019-1010180: Fixed an out of bound memory access that could lead to crashes (bsc#1142772) - enable xtensa architecture (Tensilica lc6 and related) - Use -ffat-lto-objects in order to provide assembly for static libs (bsc#1141913). - Fixed some LTO build issues (bsc#1133131 bsc#1133232). - riscv: Don't check ABI flags if no code section - Fixed a segfault in ld when building some versions of pacemaker (bsc#1154025, bsc#1154016). - Add avr, epiphany and rx to target_list so that the common binutils can handle all objects we can create with crosses (bsc#1152590). Update to binutils 2.32: * The binutils now support for the C-SKY processor series. * The x86 assembler now supports a -mvexwig=[0|1] option to control encoding of VEX.W-ignored (WIG) VEX instructions. It also has a new -mx86-used-note=[yes|no] option to generate (or not) x86 GNU property notes. * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2), the Loongson EXTensions (EXT) instructions, the Loongson Content Address Memory (CAM) ASE and the Loongson MultiMedia extensions Instructions (MMI) ASE. * The addr2line, c++filt, nm and objdump tools now have a default limit on the maximum amount of recursion that is allowed whilst demangling strings. This limit can be disabled if necessary. * Objdump's --disassemble option can now take a parameter, specifying the starting symbol for disassembly. Disassembly will continue from this symbol up to the next symbol or the end of the function. * The BFD linker will now report property change in linker map file when merging GNU properties. * The BFD linker's -t option now doesn't report members within archives, unless -t is given twice. This makes it more useful when generating a list of files that should be packaged for a linker bug report. * The GOLD linker has improved warning messages for relocations that refer to discarded sections. - Improve relro support on s390 [fate#326356] - Fix broken debug symbols (bsc#1118644) - Handle ELF compressed header alignment correctly. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2432=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): binutils-2.32-lp151.3.3.1 binutils-debuginfo-2.32-lp151.3.3.1 binutils-debugsource-2.32-lp151.3.3.1 binutils-devel-2.32-lp151.3.3.1 binutils-gold-2.32-lp151.3.3.1 binutils-gold-debuginfo-2.32-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): binutils-devel-32bit-2.32-lp151.3.3.1 cross-aarch64-binutils-2.32-lp151.3.3.1 cross-aarch64-binutils-debuginfo-2.32-lp151.3.3.1 cross-aarch64-binutils-debugsource-2.32-lp151.3.3.1 cross-arm-binutils-2.32-lp151.3.3.1 cross-arm-binutils-debuginfo-2.32-lp151.3.3.1 cross-arm-binutils-debugsource-2.32-lp151.3.3.1 cross-avr-binutils-2.32-lp151.3.3.1 cross-avr-binutils-debuginfo-2.32-lp151.3.3.1 cross-avr-binutils-debugsource-2.32-lp151.3.3.1 cross-epiphany-binutils-2.32-lp151.3.3.1 cross-epiphany-binutils-debuginfo-2.32-lp151.3.3.1 cross-epiphany-binutils-debugsource-2.32-lp151.3.3.1 cross-hppa-binutils-2.32-lp151.3.3.1 cross-hppa-binutils-debuginfo-2.32-lp151.3.3.1 cross-hppa-binutils-debugsource-2.32-lp151.3.3.1 cross-hppa64-binutils-2.32-lp151.3.3.1 cross-hppa64-binutils-debuginfo-2.32-lp151.3.3.1 cross-hppa64-binutils-debugsource-2.32-lp151.3.3.1 cross-i386-binutils-2.32-lp151.3.3.1 cross-i386-binutils-debuginfo-2.32-lp151.3.3.1 cross-i386-binutils-debugsource-2.32-lp151.3.3.1 cross-ia64-binutils-2.32-lp151.3.3.1 cross-ia64-binutils-debuginfo-2.32-lp151.3.3.1 cross-ia64-binutils-debugsource-2.32-lp151.3.3.1 cross-m68k-binutils-2.32-lp151.3.3.1 cross-m68k-binutils-debuginfo-2.32-lp151.3.3.1 cross-m68k-binutils-debugsource-2.32-lp151.3.3.1 cross-mips-binutils-2.32-lp151.3.3.1 cross-mips-binutils-debuginfo-2.32-lp151.3.3.1 cross-mips-binutils-debugsource-2.32-lp151.3.3.1 cross-ppc-binutils-2.32-lp151.3.3.1 cross-ppc-binutils-debuginfo-2.32-lp151.3.3.1 cross-ppc-binutils-debugsource-2.32-lp151.3.3.1 cross-ppc64-binutils-2.32-lp151.3.3.1 cross-ppc64-binutils-debuginfo-2.32-lp151.3.3.1 cross-ppc64-binutils-debugsource-2.32-lp151.3.3.1 cross-ppc64le-binutils-2.32-lp151.3.3.1 cross-ppc64le-binutils-debuginfo-2.32-lp151.3.3.1 cross-ppc64le-binutils-debugsource-2.32-lp151.3.3.1 cross-riscv64-binutils-2.32-lp151.3.3.1 cross-riscv64-binutils-debuginfo-2.32-lp151.3.3.1 cross-riscv64-binutils-debugsource-2.32-lp151.3.3.1 cross-rx-binutils-2.32-lp151.3.3.1 cross-rx-binutils-debuginfo-2.32-lp151.3.3.1 cross-rx-binutils-debugsource-2.32-lp151.3.3.1 cross-s390-binutils-2.32-lp151.3.3.1 cross-s390-binutils-debuginfo-2.32-lp151.3.3.1 cross-s390-binutils-debugsource-2.32-lp151.3.3.1 cross-s390x-binutils-2.32-lp151.3.3.1 cross-s390x-binutils-debuginfo-2.32-lp151.3.3.1 cross-s390x-binutils-debugsource-2.32-lp151.3.3.1 cross-sparc-binutils-2.32-lp151.3.3.1 cross-sparc-binutils-debuginfo-2.32-lp151.3.3.1 cross-sparc-binutils-debugsource-2.32-lp151.3.3.1 cross-sparc64-binutils-2.32-lp151.3.3.1 cross-sparc64-binutils-debuginfo-2.32-lp151.3.3.1 cross-sparc64-binutils-debugsource-2.32-lp151.3.3.1 cross-spu-binutils-2.32-lp151.3.3.1 cross-spu-binutils-debuginfo-2.32-lp151.3.3.1 cross-spu-binutils-debugsource-2.32-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-1000876.html https://www.suse.com/security/cve/CVE-2018-17358.html https://www.suse.com/security/cve/CVE-2018-17359.html https://www.suse.com/security/cve/CVE-2018-17360.html https://www.suse.com/security/cve/CVE-2018-17985.html https://www.suse.com/security/cve/CVE-2018-18309.html https://www.suse.com/security/cve/CVE-2018-18483.html https://www.suse.com/security/cve/CVE-2018-18484.html https://www.suse.com/security/cve/CVE-2018-18605.html https://www.suse.com/security/cve/CVE-2018-18606.html https://www.suse.com/security/cve/CVE-2018-18607.html https://www.suse.com/security/cve/CVE-2018-19931.html https://www.suse.com/security/cve/CVE-2018-19932.html https://www.suse.com/security/cve/CVE-2018-20623.html https://www.suse.com/security/cve/CVE-2018-20651.html https://www.suse.com/security/cve/CVE-2018-20671.html https://www.suse.com/security/cve/CVE-2018-6323.html https://www.suse.com/security/cve/CVE-2018-6543.html https://www.suse.com/security/cve/CVE-2018-6759.html https://www.suse.com/security/cve/CVE-2018-6872.html https://www.suse.com/security/cve/CVE-2018-7208.html https://www.suse.com/security/cve/CVE-2018-7568.html https://www.suse.com/security/cve/CVE-2018-7569.html https://www.suse.com/security/cve/CVE-2018-7570.html https://www.suse.com/security/cve/CVE-2018-7642.html https://www.suse.com/security/cve/CVE-2018-7643.html https://www.suse.com/security/cve/CVE-2018-8945.html https://www.suse.com/security/cve/CVE-2019-1010180.html https://bugzilla.suse.com/1109412 https://bugzilla.suse.com/1109413 https://bugzilla.suse.com/1109414 https://bugzilla.suse.com/1111996 https://bugzilla.suse.com/1112534 https://bugzilla.suse.com/1112535 https://bugzilla.suse.com/1113247 https://bugzilla.suse.com/1113252 https://bugzilla.suse.com/1113255 https://bugzilla.suse.com/1116827 https://bugzilla.suse.com/1118644 https://bugzilla.suse.com/1118830 https://bugzilla.suse.com/1118831 https://bugzilla.suse.com/1120640 https://bugzilla.suse.com/1121034 https://bugzilla.suse.com/1121035 https://bugzilla.suse.com/1121056 https://bugzilla.suse.com/1133131 https://bugzilla.suse.com/1133232 https://bugzilla.suse.com/1141913 https://bugzilla.suse.com/1142772 https://bugzilla.suse.com/1152590 https://bugzilla.suse.com/1154016 https://bugzilla.suse.com/1154025 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2442-1: important: Security update for samba
by opensuse-security＠opensuse.org 05 Nov '19

05 Nov '19

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2442-1 Rating: important References: #1144902 #1148539 #1152143 #1154289 #1154598 Cross-References: CVE-2019-10218 CVE-2019-14833 CVE-2019-14847 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has two fixes is now available. Description: This update for provides the following fixes: Following security issues were fixed: - CVE-2019-14847: User with "get changes" permission could have crashed AD DC LDAP server via dirsync (bsc#1154598). - CVE-2019-10218: Client code could have returned filenames containing path separators (bsc#1144902). - CVE-2019-14833: Accent with "check script password" where Samba AD DC check password script did not receive the full password (bsc#1154289). Also following non-security issues were fixed: - Fix auth problems when printing via smbspool backend with kerberos. (bsc#1148539) - Fix broken username/password authentication with CUPS and smbspool. (bsc#1152143) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2442=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ctdb-4.9.5+git.210.ab0549acb05-lp151.2.9.1 ctdb-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 ctdb-pcp-pmda-4.9.5+git.210.ab0549acb05-lp151.2.9.1 ctdb-pcp-pmda-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 ctdb-tests-4.9.5+git.210.ab0549acb05-lp151.2.9.1 ctdb-tests-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libdcerpc-binding0-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libdcerpc-binding0-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libdcerpc-devel-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libdcerpc-samr-devel-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libdcerpc-samr0-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libdcerpc-samr0-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libdcerpc0-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libdcerpc0-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libndr-devel-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libndr-krb5pac-devel-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libndr-krb5pac0-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libndr-krb5pac0-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libndr-nbt-devel-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libndr-nbt0-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libndr-nbt0-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libndr-standard-devel-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libndr-standard0-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libndr-standard0-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libndr0-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libndr0-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libnetapi-devel-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libnetapi0-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libnetapi0-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-credentials-devel-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-credentials0-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-credentials0-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-errors-devel-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-errors0-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-errors0-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-hostconfig-devel-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-hostconfig0-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-hostconfig0-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-passdb-devel-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-passdb0-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-passdb0-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-policy-devel-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-policy-python-devel-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-policy-python3-devel-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-policy0-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-policy0-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-policy0-python3-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-policy0-python3-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-util-devel-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-util0-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-util0-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamdb-devel-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamdb0-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamdb0-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsmbclient-devel-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsmbclient0-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsmbclient0-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsmbconf-devel-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsmbconf0-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsmbconf0-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsmbldap-devel-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsmbldap2-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsmbldap2-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libtevent-util-devel-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libtevent-util0-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libtevent-util0-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libwbclient-devel-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libwbclient0-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libwbclient0-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-ad-dc-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-ad-dc-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-client-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-client-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-core-devel-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-debugsource-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-dsdb-modules-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-dsdb-modules-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-libs-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-libs-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-libs-python-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-libs-python-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-libs-python3-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-libs-python3-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-pidl-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-python-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-python-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-python3-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-python3-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-test-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-test-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-winbind-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-winbind-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 - openSUSE Leap 15.1 (noarch): samba-doc-4.9.5+git.210.ab0549acb05-lp151.2.9.1 - openSUSE Leap 15.1 (x86_64): libdcerpc-binding0-32bit-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libdcerpc-binding0-32bit-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libdcerpc-samr0-32bit-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libdcerpc-samr0-32bit-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libdcerpc0-32bit-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libdcerpc0-32bit-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libndr-krb5pac0-32bit-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libndr-krb5pac0-32bit-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libndr-nbt0-32bit-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libndr-nbt0-32bit-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libndr-standard0-32bit-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libndr-standard0-32bit-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libndr0-32bit-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libndr0-32bit-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libnetapi0-32bit-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libnetapi0-32bit-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-credentials0-32bit-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-credentials0-32bit-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-errors0-32bit-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-errors0-32bit-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-hostconfig0-32bit-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-hostconfig0-32bit-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-passdb0-32bit-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-passdb0-32bit-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-policy0-32bit-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-policy0-32bit-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-policy0-python3-32bit-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-policy0-python3-32bit-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-util0-32bit-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamba-util0-32bit-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamdb0-32bit-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsamdb0-32bit-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsmbclient0-32bit-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsmbclient0-32bit-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsmbconf0-32bit-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsmbconf0-32bit-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsmbldap2-32bit-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libsmbldap2-32bit-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libtevent-util0-32bit-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libtevent-util0-32bit-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libwbclient0-32bit-4.9.5+git.210.ab0549acb05-lp151.2.9.1 libwbclient0-32bit-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-ad-dc-32bit-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-ad-dc-32bit-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-ceph-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-ceph-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-client-32bit-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-client-32bit-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-libs-32bit-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-libs-32bit-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-libs-python-32bit-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-libs-python-32bit-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-libs-python3-32bit-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-libs-python3-32bit-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-winbind-32bit-4.9.5+git.210.ab0549acb05-lp151.2.9.1 samba-winbind-32bit-debuginfo-4.9.5+git.210.ab0549acb05-lp151.2.9.1 References: https://www.suse.com/security/cve/CVE-2019-10218.html https://www.suse.com/security/cve/CVE-2019-14833.html https://www.suse.com/security/cve/CVE-2019-14847.html https://bugzilla.suse.com/1144902 https://bugzilla.suse.com/1148539 https://bugzilla.suse.com/1152143 https://bugzilla.suse.com/1154289 https://bugzilla.suse.com/1154598 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2435-1: moderate: Security update for nfs-utils
by opensuse-security＠opensuse.org 05 Nov '19

05 Nov '19

openSUSE Security Update: Security update for nfs-utils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2435-1 Rating: moderate References: #1150733 Cross-References: CVE-2019-3689 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for nfs-utils fixes the following issues: - CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs. (bsc#1150733) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2435=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): nfs-client-2.1.1-lp151.7.3.1 nfs-client-debuginfo-2.1.1-lp151.7.3.1 nfs-doc-2.1.1-lp151.7.3.1 nfs-kernel-server-2.1.1-lp151.7.3.1 nfs-kernel-server-debuginfo-2.1.1-lp151.7.3.1 nfs-utils-debuginfo-2.1.1-lp151.7.3.1 nfs-utils-debugsource-2.1.1-lp151.7.3.1 References: https://www.suse.com/security/cve/CVE-2019-3689.html https://bugzilla.suse.com/1150733 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2427-1: important: Security update for chromium
by opensuse-security＠opensuse.org 04 Nov '19

04 Nov '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2427-1 Rating: important References: #1155643 Cross-References: CVE-2019-13720 CVE-2019-13721 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium was updated to 78.0.3904.87 boo#1155643: * CVE-2019-13721: Use-after-free in PDFium * CVE-2019-13720: Use-after-free in audio This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2427=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-78.0.3904.87-bp151.3.25.1 chromium-78.0.3904.87-bp151.3.25.1 References: https://www.suse.com/security/cve/CVE-2019-13720.html https://www.suse.com/security/cve/CVE-2019-13721.html https://bugzilla.suse.com/1155643 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2426-1: important: Security update for chromium
by opensuse-security＠opensuse.org 03 Nov '19

03 Nov '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2426-1 Rating: important References: #1155643 Cross-References: CVE-2019-13720 CVE-2019-13721 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium was updated to 78.0.3904.87 boo#1155643: * CVE-2019-13721: Use-after-free in PDFium * CVE-2019-13720: Use-after-free in audio This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2426=1 Package List: - openSUSE Backports SLE-15 (aarch64 x86_64): chromedriver-78.0.3904.87-bp150.243.1 chromium-78.0.3904.87-bp150.243.1 References: https://www.suse.com/security/cve/CVE-2019-13720.html https://www.suse.com/security/cve/CVE-2019-13721.html https://bugzilla.suse.com/1155643 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2425-1: important: Security update for chromium, re2
by opensuse-security＠opensuse.org 03 Nov '19

03 Nov '19

openSUSE Security Update: Security update for chromium, re2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2425-1 Rating: important References: #1154806 Cross-References: CVE-2019-13699 CVE-2019-13700 CVE-2019-13701 CVE-2019-13702 CVE-2019-13703 CVE-2019-13704 CVE-2019-13705 CVE-2019-13706 CVE-2019-13707 CVE-2019-13708 CVE-2019-13709 CVE-2019-13710 CVE-2019-13711 CVE-2019-13713 CVE-2019-13714 CVE-2019-13715 CVE-2019-13716 CVE-2019-13717 CVE-2019-13718 CVE-2019-13719 CVE-2019-15903 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes 21 vulnerabilities is now available. Description: This update for chromium, re2 fixes the following issues: Chromium was updated to 78.0.3904.70 boo#1154806: * CVE-2019-13699: Use-after-free in media * CVE-2019-13700: Buffer overrun in Blink * CVE-2019-13701: URL spoof in navigation * CVE-2019-13702: Privilege elevation in Installer * CVE-2019-13703: URL bar spoofing * CVE-2019-13704: CSP bypass * CVE-2019-13705: Extension permission bypass * CVE-2019-13706: Out-of-bounds read in PDFium * CVE-2019-13707: File storage disclosure * CVE-2019-13708: HTTP authentication spoof * CVE-2019-13709: File download protection bypass * CVE-2019-13710: File download protection bypass * CVE-2019-13711: Cross-context information leak * CVE-2019-15903: Buffer overflow in expat * CVE-2019-13713: Cross-origin data leak * CVE-2019-13714: CSS injection * CVE-2019-13715: Address bar spoofing * CVE-2019-13716: Service worker state error * CVE-2019-13717: Notification obscured * CVE-2019-13718: IDN spoof * CVE-2019-13719: Notification obscured * Various fixes from internal audits, fuzzing and other initiatives - Use internal resources for icon and appdata This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2425=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): libre2-0-20190901-bp151.6.3.1 libre2-0-debuginfo-20190901-bp151.6.3.1 re2-debugsource-20190901-bp151.6.3.1 re2-devel-20190901-bp151.6.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-78.0.3904.70-bp151.3.21.1 chromium-78.0.3904.70-bp151.3.21.1 - openSUSE Backports SLE-15-SP1 (aarch64_ilp32): libre2-0-64bit-20190901-bp151.6.3.1 libre2-0-64bit-debuginfo-20190901-bp151.6.3.1 References: https://www.suse.com/security/cve/CVE-2019-13699.html https://www.suse.com/security/cve/CVE-2019-13700.html https://www.suse.com/security/cve/CVE-2019-13701.html https://www.suse.com/security/cve/CVE-2019-13702.html https://www.suse.com/security/cve/CVE-2019-13703.html https://www.suse.com/security/cve/CVE-2019-13704.html https://www.suse.com/security/cve/CVE-2019-13705.html https://www.suse.com/security/cve/CVE-2019-13706.html https://www.suse.com/security/cve/CVE-2019-13707.html https://www.suse.com/security/cve/CVE-2019-13708.html https://www.suse.com/security/cve/CVE-2019-13709.html https://www.suse.com/security/cve/CVE-2019-13710.html https://www.suse.com/security/cve/CVE-2019-13711.html https://www.suse.com/security/cve/CVE-2019-13713.html https://www.suse.com/security/cve/CVE-2019-13714.html https://www.suse.com/security/cve/CVE-2019-13715.html https://www.suse.com/security/cve/CVE-2019-13716.html https://www.suse.com/security/cve/CVE-2019-13717.html https://www.suse.com/security/cve/CVE-2019-13718.html https://www.suse.com/security/cve/CVE-2019-13719.html https://www.suse.com/security/cve/CVE-2019-15903.html https://bugzilla.suse.com/1154806 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2424-1: important: Security update for chromium, re2
by opensuse-security＠opensuse.org 03 Nov '19

03 Nov '19

openSUSE Security Update: Security update for chromium, re2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2424-1 Rating: important References: #1154806 Cross-References: CVE-2019-13699 CVE-2019-13700 CVE-2019-13701 CVE-2019-13702 CVE-2019-13703 CVE-2019-13704 CVE-2019-13705 CVE-2019-13706 CVE-2019-13707 CVE-2019-13708 CVE-2019-13709 CVE-2019-13710 CVE-2019-13711 CVE-2019-13713 CVE-2019-13714 CVE-2019-13715 CVE-2019-13716 CVE-2019-13717 CVE-2019-13718 CVE-2019-13719 CVE-2019-15903 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes 21 vulnerabilities is now available. Description: This update for chromium, re2 fixes the following issues: Chromium was updated to 78.0.3904.70 boo#1154806: * CVE-2019-13699: Use-after-free in media * CVE-2019-13700: Buffer overrun in Blink * CVE-2019-13701: URL spoof in navigation * CVE-2019-13702: Privilege elevation in Installer * CVE-2019-13703: URL bar spoofing * CVE-2019-13704: CSP bypass * CVE-2019-13705: Extension permission bypass * CVE-2019-13706: Out-of-bounds read in PDFium * CVE-2019-13707: File storage disclosure * CVE-2019-13708: HTTP authentication spoof * CVE-2019-13709: File download protection bypass * CVE-2019-13710: File download protection bypass * CVE-2019-13711: Cross-context information leak * CVE-2019-15903: Buffer overflow in expat * CVE-2019-13713: Cross-origin data leak * CVE-2019-13714: CSS injection * CVE-2019-13715: Address bar spoofing * CVE-2019-13716: Service worker state error * CVE-2019-13717: Notification obscured * CVE-2019-13718: IDN spoof * CVE-2019-13719: Notification obscured * Various fixes from internal audits, fuzzing and other initiatives - Use internal resources for icon and appdata This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2424=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): libre2-0-20190901-bp150.25.1 libre2-0-debuginfo-20190901-bp150.25.1 re2-debugsource-20190901-bp150.25.1 re2-devel-20190901-bp150.25.1 - openSUSE Backports SLE-15 (aarch64 x86_64): chromedriver-78.0.3904.70-bp150.240.1 chromium-78.0.3904.70-bp150.240.1 - openSUSE Backports SLE-15 (aarch64_ilp32): libre2-0-64bit-20190901-bp150.25.1 libre2-0-64bit-debuginfo-20190901-bp150.25.1 References: https://www.suse.com/security/cve/CVE-2019-13699.html https://www.suse.com/security/cve/CVE-2019-13700.html https://www.suse.com/security/cve/CVE-2019-13701.html https://www.suse.com/security/cve/CVE-2019-13702.html https://www.suse.com/security/cve/CVE-2019-13703.html https://www.suse.com/security/cve/CVE-2019-13704.html https://www.suse.com/security/cve/CVE-2019-13705.html https://www.suse.com/security/cve/CVE-2019-13706.html https://www.suse.com/security/cve/CVE-2019-13707.html https://www.suse.com/security/cve/CVE-2019-13708.html https://www.suse.com/security/cve/CVE-2019-13709.html https://www.suse.com/security/cve/CVE-2019-13710.html https://www.suse.com/security/cve/CVE-2019-13711.html https://www.suse.com/security/cve/CVE-2019-13713.html https://www.suse.com/security/cve/CVE-2019-13714.html https://www.suse.com/security/cve/CVE-2019-13715.html https://www.suse.com/security/cve/CVE-2019-13716.html https://www.suse.com/security/cve/CVE-2019-13717.html https://www.suse.com/security/cve/CVE-2019-13718.html https://www.suse.com/security/cve/CVE-2019-13719.html https://www.suse.com/security/cve/CVE-2019-15903.html https://bugzilla.suse.com/1154806 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2421-1: important: Security update for chromium
by opensuse-security＠opensuse.org 02 Nov '19

02 Nov '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2421-1 Rating: important References: #1155643 Cross-References: CVE-2019-13720 CVE-2019-13721 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium was updated to 78.0.3904.87 boo#1155643: * CVE-2019-13721: Use-after-free in PDFium * CVE-2019-13720: Use-after-free in audio Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2421=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2421=1 Package List: - openSUSE Leap 15.1 (x86_64): chromedriver-78.0.3904.87-lp151.2.42.1 chromedriver-debuginfo-78.0.3904.87-lp151.2.42.1 chromium-78.0.3904.87-lp151.2.42.1 chromium-debuginfo-78.0.3904.87-lp151.2.42.1 chromium-debugsource-78.0.3904.87-lp151.2.42.1 - openSUSE Leap 15.0 (x86_64): chromedriver-78.0.3904.87-lp150.251.1 chromedriver-debuginfo-78.0.3904.87-lp150.251.1 chromium-78.0.3904.87-lp150.251.1 chromium-debuginfo-78.0.3904.87-lp150.251.1 chromium-debugsource-78.0.3904.87-lp150.251.1 References: https://www.suse.com/security/cve/CVE-2019-13720.html https://www.suse.com/security/cve/CVE-2019-13721.html https://bugzilla.suse.com/1155643 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2420-1: important: Security update for chromium, re2
by opensuse-security＠opensuse.org 02 Nov '19

02 Nov '19

openSUSE Security Update: Security update for chromium, re2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2420-1 Rating: important References: #1154806 Cross-References: CVE-2019-13699 CVE-2019-13700 CVE-2019-13701 CVE-2019-13702 CVE-2019-13703 CVE-2019-13704 CVE-2019-13705 CVE-2019-13706 CVE-2019-13707 CVE-2019-13708 CVE-2019-13709 CVE-2019-13710 CVE-2019-13711 CVE-2019-13713 CVE-2019-13714 CVE-2019-13715 CVE-2019-13716 CVE-2019-13717 CVE-2019-13718 CVE-2019-13719 CVE-2019-15903 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 21 vulnerabilities is now available. Description: This update for chromium, re2 fixes the following issues: Chromium was updated to 78.0.3904.70 boo#1154806: * CVE-2019-13699: Use-after-free in media * CVE-2019-13700: Buffer overrun in Blink * CVE-2019-13701: URL spoof in navigation * CVE-2019-13702: Privilege elevation in Installer * CVE-2019-13703: URL bar spoofing * CVE-2019-13704: CSP bypass * CVE-2019-13705: Extension permission bypass * CVE-2019-13706: Out-of-bounds read in PDFium * CVE-2019-13707: File storage disclosure * CVE-2019-13708: HTTP authentication spoof * CVE-2019-13709: File download protection bypass * CVE-2019-13710: File download protection bypass * CVE-2019-13711: Cross-context information leak * CVE-2019-15903: Buffer overflow in expat * CVE-2019-13713: Cross-origin data leak * CVE-2019-13714: CSS injection * CVE-2019-13715: Address bar spoofing * CVE-2019-13716: Service worker state error * CVE-2019-13717: Notification obscured * CVE-2019-13718: IDN spoof * CVE-2019-13719: Notification obscured * Various fixes from internal audits, fuzzing and other initiatives - Use internal resources for icon and appdata Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2420=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2420=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libre2-0-20190901-lp151.10.3.1 libre2-0-debuginfo-20190901-lp151.10.3.1 re2-debugsource-20190901-lp151.10.3.1 re2-devel-20190901-lp151.10.3.1 - openSUSE Leap 15.1 (x86_64): chromedriver-78.0.3904.70-lp151.2.39.1 chromedriver-debuginfo-78.0.3904.70-lp151.2.39.1 chromium-78.0.3904.70-lp151.2.39.1 chromium-debuginfo-78.0.3904.70-lp151.2.39.1 chromium-debugsource-78.0.3904.70-lp151.2.39.1 libre2-0-32bit-20190901-lp151.10.3.1 libre2-0-32bit-debuginfo-20190901-lp151.10.3.1 - openSUSE Leap 15.0 (i586 x86_64): libre2-0-20190901-lp150.25.1 libre2-0-debuginfo-20190901-lp150.25.1 re2-debugsource-20190901-lp150.25.1 re2-devel-20190901-lp150.25.1 - openSUSE Leap 15.0 (x86_64): chromedriver-78.0.3904.70-lp150.248.2 chromedriver-debuginfo-78.0.3904.70-lp150.248.2 chromium-78.0.3904.70-lp150.248.2 chromium-debuginfo-78.0.3904.70-lp150.248.2 chromium-debugsource-78.0.3904.70-lp150.248.2 libre2-0-32bit-20190901-lp150.25.1 libre2-0-32bit-debuginfo-20190901-lp150.25.1 References: https://www.suse.com/security/cve/CVE-2019-13699.html https://www.suse.com/security/cve/CVE-2019-13700.html https://www.suse.com/security/cve/CVE-2019-13701.html https://www.suse.com/security/cve/CVE-2019-13702.html https://www.suse.com/security/cve/CVE-2019-13703.html https://www.suse.com/security/cve/CVE-2019-13704.html https://www.suse.com/security/cve/CVE-2019-13705.html https://www.suse.com/security/cve/CVE-2019-13706.html https://www.suse.com/security/cve/CVE-2019-13707.html https://www.suse.com/security/cve/CVE-2019-13708.html https://www.suse.com/security/cve/CVE-2019-13709.html https://www.suse.com/security/cve/CVE-2019-13710.html https://www.suse.com/security/cve/CVE-2019-13711.html https://www.suse.com/security/cve/CVE-2019-13713.html https://www.suse.com/security/cve/CVE-2019-13714.html https://www.suse.com/security/cve/CVE-2019-13715.html https://www.suse.com/security/cve/CVE-2019-13716.html https://www.suse.com/security/cve/CVE-2019-13717.html https://www.suse.com/security/cve/CVE-2019-13718.html https://www.suse.com/security/cve/CVE-2019-13719.html https://www.suse.com/security/cve/CVE-2019-15903.html https://bugzilla.suse.com/1154806 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0