February 2019 - openSUSE Security Announce

[security-announce] openSUSE-SU-2019:0268-1: important: Security update for systemd
by opensuse-security＠opensuse.org 28 Feb '19

28 Feb '19

openSUSE Security Update: Security update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0268-1 Rating: important References: #1111498 #1117025 #1117382 #1120658 #1122000 #1122344 #1123333 #1123892 #1125352 Cross-References: CVE-2019-6454 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has 8 fixes is now available. Description: This update for systemd fixes the following issues: Security vulnerability fixed: - CVE-2019-6454: Fixed a crash of PID1 by sending specially crafted D-BUS message on the system bus by an unprivileged user (bsc#1125352) Other bug fixes and changes: - journal-remote: set a limit on the number of fields in a message - journal-remote: verify entry length from header - journald: set a limit on the number of fields (1k) - journald: do not store the iovec entry for process commandline on stack - core: include Found state in device dumps - device: fix serialization and deserialization of DeviceFound - fix path in btrfs rule (#6844) - assemble multidevice btrfs volumes without external tools (#6607) (bsc#1117025) - Update systemd-system.conf.xml (bsc#1122000) - units: inform user that the default target is started after exiting from rescue or emergency mode - manager: don't skip sigchld handler for main and control pid for services (#3738) - core: Add helper functions unit_{main, control}_pid - manager: Fixing a debug printf formatting mistake (#3640) - manager: Only invoke a single sigchld per unit within a cleanup cycle (bsc#1117382) - core: update invoke_sigchld_event() to handle NULL ->sigchld_event() - sd-event: expose the event loop iteration counter via sd_event_get_iteration() (#3631) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (bsc#1122344) - core: when restarting services, don't close fds - cryptsetup: Add dependency on loopback setup to generated units - journal-gateway: use localStorage["cursor"] only when it has valid value - journal-gateway: explicitly declare local variables - analyze: actually select longest activated-time of services - sd-bus: fix implicit downcast of bitfield reported by LGTM - core: free lines after reading them (bsc#1123892) - pam_systemd: reword message about not creating a session (bsc#1111498) - pam_systemd: suppress LOG_DEBUG log messages if debugging is off (bsc#1111498) - main: improve RLIMIT_NOFILE handling (#5795) (bsc#1120658) - sd-bus: if we receive an invalid dbus message, ignore and proceeed - automount: don't pass non-blocking pipe to kernel. - units: make sure initrd-cleanup.service terminates before switching to rootfs (bsc#1123333) - units: add Wants=initrd-cleanup.service to initrd-switch-root.target (#4345) (bsc#1123333) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-268=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libsystemd0-228-68.1 libsystemd0-debuginfo-228-68.1 libsystemd0-mini-228-68.1 libsystemd0-mini-debuginfo-228-68.1 libudev-devel-228-68.1 libudev-mini-devel-228-68.1 libudev-mini1-228-68.1 libudev-mini1-debuginfo-228-68.1 libudev1-228-68.1 libudev1-debuginfo-228-68.1 nss-myhostname-228-68.1 nss-myhostname-debuginfo-228-68.1 nss-mymachines-228-68.1 nss-mymachines-debuginfo-228-68.1 systemd-228-68.1 systemd-debuginfo-228-68.1 systemd-debugsource-228-68.1 systemd-devel-228-68.1 systemd-logger-228-68.1 systemd-mini-228-68.1 systemd-mini-debuginfo-228-68.1 systemd-mini-debugsource-228-68.1 systemd-mini-devel-228-68.1 systemd-mini-sysvinit-228-68.1 systemd-sysvinit-228-68.1 udev-228-68.1 udev-debuginfo-228-68.1 udev-mini-228-68.1 udev-mini-debuginfo-228-68.1 - openSUSE Leap 42.3 (x86_64): libsystemd0-32bit-228-68.1 libsystemd0-debuginfo-32bit-228-68.1 libudev1-32bit-228-68.1 libudev1-debuginfo-32bit-228-68.1 nss-myhostname-32bit-228-68.1 nss-myhostname-debuginfo-32bit-228-68.1 systemd-32bit-228-68.1 systemd-debuginfo-32bit-228-68.1 - openSUSE Leap 42.3 (noarch): systemd-bash-completion-228-68.1 systemd-mini-bash-completion-228-68.1 References: https://www.suse.com/security/cve/CVE-2019-6454.html https://bugzilla.suse.com/1111498 https://bugzilla.suse.com/1117025 https://bugzilla.suse.com/1117382 https://bugzilla.suse.com/1120658 https://bugzilla.suse.com/1122000 https://bugzilla.suse.com/1122344 https://bugzilla.suse.com/1123333 https://bugzilla.suse.com/1123892 https://bugzilla.suse.com/1125352 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:0265-1: moderate: Security update for libqt5-qtbase
by opensuse-security＠opensuse.org 27 Feb '19

27 Feb '19

openSUSE Security Update: Security update for libqt5-qtbase ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0265-1 Rating: moderate References: #1096328 #1099874 #1108889 #1118595 #1118596 #1120639 Cross-References: CVE-2018-15518 CVE-2018-19873 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has four fixes is now available. Description: This update for libqt5-qtbase provides the following fixes: Security issues fixed: - CVE-2018-15518: Fixed double free in QXmlStreamReader (bsc#1118595) - CVE-2018-19873: Fixed Denial of Service on malformed BMP file in QBmpHandler (bsc#1118596) Non-security issues fixed: - Fix dynamic loading of libGL. (bsc#1099874) - Make sure printer settings are properly remembered. (bsc#1096328) - Add patch to fix fails to load pixmap cursors on XRender less system (bsc#1108889) - Fix krita pop-up palette not working properly (bsc#1120639) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-265=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libQt5Bootstrap-devel-static-5.9.4-lp150.5.4.1 libQt5Concurrent-devel-5.9.4-lp150.5.4.1 libQt5Concurrent5-5.9.4-lp150.5.4.1 libQt5Concurrent5-debuginfo-5.9.4-lp150.5.4.1 libQt5Core-devel-5.9.4-lp150.5.4.1 libQt5Core5-5.9.4-lp150.5.4.1 libQt5Core5-debuginfo-5.9.4-lp150.5.4.1 libQt5DBus-devel-5.9.4-lp150.5.4.1 libQt5DBus-devel-debuginfo-5.9.4-lp150.5.4.1 libQt5DBus5-5.9.4-lp150.5.4.1 libQt5DBus5-debuginfo-5.9.4-lp150.5.4.1 libQt5Gui-devel-5.9.4-lp150.5.4.1 libQt5Gui5-5.9.4-lp150.5.4.1 libQt5Gui5-debuginfo-5.9.4-lp150.5.4.1 libQt5KmsSupport-devel-static-5.9.4-lp150.5.4.1 libQt5Network-devel-5.9.4-lp150.5.4.1 libQt5Network5-5.9.4-lp150.5.4.1 libQt5Network5-debuginfo-5.9.4-lp150.5.4.1 libQt5OpenGL-devel-5.9.4-lp150.5.4.1 libQt5OpenGL5-5.9.4-lp150.5.4.1 libQt5OpenGL5-debuginfo-5.9.4-lp150.5.4.1 libQt5OpenGLExtensions-devel-static-5.9.4-lp150.5.4.1 libQt5PlatformHeaders-devel-5.9.4-lp150.5.4.1 libQt5PlatformSupport-devel-static-5.9.4-lp150.5.4.1 libQt5PrintSupport-devel-5.9.4-lp150.5.4.1 libQt5PrintSupport5-5.9.4-lp150.5.4.1 libQt5PrintSupport5-debuginfo-5.9.4-lp150.5.4.1 libQt5Sql-devel-5.9.4-lp150.5.4.1 libQt5Sql5-5.9.4-lp150.5.4.1 libQt5Sql5-debuginfo-5.9.4-lp150.5.4.1 libQt5Sql5-mysql-5.9.4-lp150.5.4.1 libQt5Sql5-mysql-debuginfo-5.9.4-lp150.5.4.1 libQt5Sql5-postgresql-5.9.4-lp150.5.4.1 libQt5Sql5-postgresql-debuginfo-5.9.4-lp150.5.4.1 libQt5Sql5-sqlite-5.9.4-lp150.5.4.1 libQt5Sql5-sqlite-debuginfo-5.9.4-lp150.5.4.1 libQt5Sql5-unixODBC-5.9.4-lp150.5.4.1 libQt5Sql5-unixODBC-debuginfo-5.9.4-lp150.5.4.1 libQt5Test-devel-5.9.4-lp150.5.4.1 libQt5Test5-5.9.4-lp150.5.4.1 libQt5Test5-debuginfo-5.9.4-lp150.5.4.1 libQt5Widgets-devel-5.9.4-lp150.5.4.1 libQt5Widgets5-5.9.4-lp150.5.4.1 libQt5Widgets5-debuginfo-5.9.4-lp150.5.4.1 libQt5Xml-devel-5.9.4-lp150.5.4.1 libQt5Xml5-5.9.4-lp150.5.4.1 libQt5Xml5-debuginfo-5.9.4-lp150.5.4.1 libqt5-qtbase-common-devel-5.9.4-lp150.5.4.1 libqt5-qtbase-common-devel-debuginfo-5.9.4-lp150.5.4.1 libqt5-qtbase-debugsource-5.9.4-lp150.5.4.1 libqt5-qtbase-devel-5.9.4-lp150.5.4.1 libqt5-qtbase-examples-5.9.4-lp150.5.4.1 libqt5-qtbase-examples-debuginfo-5.9.4-lp150.5.4.1 libqt5-qtbase-platformtheme-gtk3-5.9.4-lp150.5.4.1 libqt5-qtbase-platformtheme-gtk3-debuginfo-5.9.4-lp150.5.4.1 - openSUSE Leap 15.0 (x86_64): libQt5Bootstrap-devel-static-32bit-5.9.4-lp150.5.4.1 libQt5Concurrent-devel-32bit-5.9.4-lp150.5.4.1 libQt5Concurrent5-32bit-5.9.4-lp150.5.4.1 libQt5Concurrent5-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5Core-devel-32bit-5.9.4-lp150.5.4.1 libQt5Core5-32bit-5.9.4-lp150.5.4.1 libQt5Core5-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5DBus-devel-32bit-5.9.4-lp150.5.4.1 libQt5DBus-devel-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5DBus5-32bit-5.9.4-lp150.5.4.1 libQt5DBus5-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5Gui-devel-32bit-5.9.4-lp150.5.4.1 libQt5Gui5-32bit-5.9.4-lp150.5.4.1 libQt5Gui5-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5Network-devel-32bit-5.9.4-lp150.5.4.1 libQt5Network5-32bit-5.9.4-lp150.5.4.1 libQt5Network5-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5OpenGL-devel-32bit-5.9.4-lp150.5.4.1 libQt5OpenGL5-32bit-5.9.4-lp150.5.4.1 libQt5OpenGL5-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5OpenGLExtensions-devel-static-32bit-5.9.4-lp150.5.4.1 libQt5PlatformSupport-devel-static-32bit-5.9.4-lp150.5.4.1 libQt5PrintSupport-devel-32bit-5.9.4-lp150.5.4.1 libQt5PrintSupport5-32bit-5.9.4-lp150.5.4.1 libQt5PrintSupport5-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5Sql-devel-32bit-5.9.4-lp150.5.4.1 libQt5Sql5-32bit-5.9.4-lp150.5.4.1 libQt5Sql5-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5Sql5-mysql-32bit-5.9.4-lp150.5.4.1 libQt5Sql5-mysql-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5Sql5-postgresql-32bit-5.9.4-lp150.5.4.1 libQt5Sql5-postgresql-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5Sql5-sqlite-32bit-5.9.4-lp150.5.4.1 libQt5Sql5-sqlite-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5Sql5-unixODBC-32bit-5.9.4-lp150.5.4.1 libQt5Sql5-unixODBC-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5Test-devel-32bit-5.9.4-lp150.5.4.1 libQt5Test5-32bit-5.9.4-lp150.5.4.1 libQt5Test5-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5Widgets-devel-32bit-5.9.4-lp150.5.4.1 libQt5Widgets5-32bit-5.9.4-lp150.5.4.1 libQt5Widgets5-32bit-debuginfo-5.9.4-lp150.5.4.1 libQt5Xml-devel-32bit-5.9.4-lp150.5.4.1 libQt5Xml5-32bit-5.9.4-lp150.5.4.1 libQt5Xml5-32bit-debuginfo-5.9.4-lp150.5.4.1 libqt5-qtbase-examples-32bit-5.9.4-lp150.5.4.1 libqt5-qtbase-examples-32bit-debuginfo-5.9.4-lp150.5.4.1 - openSUSE Leap 15.0 (noarch): libQt5Core-private-headers-devel-5.9.4-lp150.5.4.1 libQt5DBus-private-headers-devel-5.9.4-lp150.5.4.1 libQt5Gui-private-headers-devel-5.9.4-lp150.5.4.1 libQt5KmsSupport-private-headers-devel-5.9.4-lp150.5.4.1 libQt5Network-private-headers-devel-5.9.4-lp150.5.4.1 libQt5OpenGL-private-headers-devel-5.9.4-lp150.5.4.1 libQt5PlatformSupport-private-headers-devel-5.9.4-lp150.5.4.1 libQt5PrintSupport-private-headers-devel-5.9.4-lp150.5.4.1 libQt5Sql-private-headers-devel-5.9.4-lp150.5.4.1 libQt5Test-private-headers-devel-5.9.4-lp150.5.4.1 libQt5Widgets-private-headers-devel-5.9.4-lp150.5.4.1 libqt5-qtbase-private-headers-devel-5.9.4-lp150.5.4.1 References: https://www.suse.com/security/cve/CVE-2018-15518.html https://www.suse.com/security/cve/CVE-2018-19873.html https://bugzilla.suse.com/1096328 https://bugzilla.suse.com/1099874 https://bugzilla.suse.com/1108889 https://bugzilla.suse.com/1118595 https://bugzilla.suse.com/1118596 https://bugzilla.suse.com/1120639 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:0254-1: important: Security update for qemu
by opensuse-security＠opensuse.org 27 Feb '19

27 Feb '19

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0254-1 Rating: important References: #1063993 #1079730 #1100408 #1101982 #1112646 #1114957 #1116717 #1117275 #1119493 #1121600 #1123156 #1123179 Cross-References: CVE-2018-16872 CVE-2018-18954 CVE-2018-19364 CVE-2018-19489 CVE-2019-6778 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has 7 fixes is now available. Description: This update for qemu fixes the following issues: Security issues fixed: - CVE-2019-6778: Fixed a heap buffer overflow issue in the SLiRP networking implementation (bsc#1123156). - CVE-2018-16872: Fixed a host security vulnerability related to handling symlinks in usb-mtp (bsc#1119493). - CVE-2018-19489: Fixed a denial of service vulnerability in virtfs (bsc#1117275). - CVE-2018-19364: Fixed a use-after-free if the virtfs interface resulting in a denial of service (bsc#1116717). - CVE-2018-18954: Fixed a denial of service vulnerability related to PowerPC PowerNV memory operations (bsc#1114957). Non-security issues fixed: - Improved disk performance for qemu on xen (bsc#1100408). - Fixed xen offline migration (bsc#1079730, bsc#1101982, bsc#1063993). - Fixed pwrite64/pread64/write to return 0 over -1 for a zero length NULL buffer in qemu (bsc#1121600). - Use /bin/bash to echo value into sys fs for ksm control (bsc#1112646). - Return specification exception for unimplemented diag 308 subcodes rather than a hardware error (bsc#1123179). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-254=1 Package List: - openSUSE Leap 15.0 (noarch): qemu-ipxe-1.0.0+-lp150.7.18.1 qemu-seabios-1.11.0-lp150.7.18.1 qemu-sgabios-8-lp150.7.18.1 qemu-vgabios-1.11.0-lp150.7.18.1 - openSUSE Leap 15.0 (x86_64): qemu-2.11.2-lp150.7.18.1 qemu-arm-2.11.2-lp150.7.18.1 qemu-arm-debuginfo-2.11.2-lp150.7.18.1 qemu-block-curl-2.11.2-lp150.7.18.1 qemu-block-curl-debuginfo-2.11.2-lp150.7.18.1 qemu-block-dmg-2.11.2-lp150.7.18.1 qemu-block-dmg-debuginfo-2.11.2-lp150.7.18.1 qemu-block-gluster-2.11.2-lp150.7.18.1 qemu-block-gluster-debuginfo-2.11.2-lp150.7.18.1 qemu-block-iscsi-2.11.2-lp150.7.18.1 qemu-block-iscsi-debuginfo-2.11.2-lp150.7.18.1 qemu-block-rbd-2.11.2-lp150.7.18.1 qemu-block-rbd-debuginfo-2.11.2-lp150.7.18.1 qemu-block-ssh-2.11.2-lp150.7.18.1 qemu-block-ssh-debuginfo-2.11.2-lp150.7.18.1 qemu-debuginfo-2.11.2-lp150.7.18.1 qemu-debugsource-2.11.2-lp150.7.18.1 qemu-extra-2.11.2-lp150.7.18.1 qemu-extra-debuginfo-2.11.2-lp150.7.18.1 qemu-guest-agent-2.11.2-lp150.7.18.1 qemu-guest-agent-debuginfo-2.11.2-lp150.7.18.1 qemu-ksm-2.11.2-lp150.7.18.1 qemu-kvm-2.11.2-lp150.7.18.1 qemu-lang-2.11.2-lp150.7.18.1 qemu-linux-user-2.11.2-lp150.7.18.1 qemu-linux-user-debuginfo-2.11.2-lp150.7.18.1 qemu-linux-user-debugsource-2.11.2-lp150.7.18.1 qemu-ppc-2.11.2-lp150.7.18.1 qemu-ppc-debuginfo-2.11.2-lp150.7.18.1 qemu-s390-2.11.2-lp150.7.18.1 qemu-s390-debuginfo-2.11.2-lp150.7.18.1 qemu-testsuite-2.11.2-lp150.7.18.1 qemu-tools-2.11.2-lp150.7.18.1 qemu-tools-debuginfo-2.11.2-lp150.7.18.1 qemu-x86-2.11.2-lp150.7.18.1 qemu-x86-debuginfo-2.11.2-lp150.7.18.1 References: https://www.suse.com/security/cve/CVE-2018-16872.html https://www.suse.com/security/cve/CVE-2018-18954.html https://www.suse.com/security/cve/CVE-2018-19364.html https://www.suse.com/security/cve/CVE-2018-19489.html https://www.suse.com/security/cve/CVE-2019-6778.html https://bugzilla.suse.com/1063993 https://bugzilla.suse.com/1079730 https://bugzilla.suse.com/1100408 https://bugzilla.suse.com/1101982 https://bugzilla.suse.com/1112646 https://bugzilla.suse.com/1114957 https://bugzilla.suse.com/1116717 https://bugzilla.suse.com/1117275 https://bugzilla.suse.com/1119493 https://bugzilla.suse.com/1121600 https://bugzilla.suse.com/1123156 https://bugzilla.suse.com/1123179 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:0261-1: important: Security update for gvfs
by opensuse-security＠opensuse.org 27 Feb '19

27 Feb '19

openSUSE Security Update: Security update for gvfs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0261-1 Rating: important References: #1125084 Cross-References: CVE-2019-3827 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gvfs fixes the following issues: Security vulnerability fixed: - CVE-2019-3827: Fixed an issue whereby an unprivileged user was not prompted to give a password when acessing root owned files. (bsc#1125084) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-261=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): gvfs-1.34.2.1-lp150.3.6.1 gvfs-backend-afc-1.34.2.1-lp150.3.6.1 gvfs-backend-afc-debuginfo-1.34.2.1-lp150.3.6.1 gvfs-backend-samba-1.34.2.1-lp150.3.6.1 gvfs-backend-samba-debuginfo-1.34.2.1-lp150.3.6.1 gvfs-backends-1.34.2.1-lp150.3.6.1 gvfs-backends-debuginfo-1.34.2.1-lp150.3.6.1 gvfs-debuginfo-1.34.2.1-lp150.3.6.1 gvfs-debugsource-1.34.2.1-lp150.3.6.1 gvfs-devel-1.34.2.1-lp150.3.6.1 gvfs-fuse-1.34.2.1-lp150.3.6.1 gvfs-fuse-debuginfo-1.34.2.1-lp150.3.6.1 - openSUSE Leap 15.0 (noarch): gvfs-lang-1.34.2.1-lp150.3.6.1 - openSUSE Leap 15.0 (x86_64): gvfs-32bit-1.34.2.1-lp150.3.6.1 gvfs-32bit-debuginfo-1.34.2.1-lp150.3.6.1 References: https://www.suse.com/security/cve/CVE-2019-3827.html https://bugzilla.suse.com/1125084 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:0252-1: important: Security update for docker-runc
by opensuse-security＠opensuse.org 27 Feb '19

27 Feb '19

openSUSE Security Update: Security update for docker-runc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0252-1 Rating: important References: #1121967 Cross-References: CVE-2019-5736 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for docker-runc fixes the following issues: Security issue fixed: - CVE-2019-5736: Effectively copying /proc/self/exe during re-exec to avoid write attacks to the host runc binary, which could lead to a container breakout (bsc#1121967) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-252=1 Package List: - openSUSE Leap 15.0 (noarch): docker-runc-test-1.0.0rc5+gitr3562_69663f0bd4b6-lp150.5.7.1 - openSUSE Leap 15.0 (x86_64): docker-runc-1.0.0rc5+gitr3562_69663f0bd4b6-lp150.5.7.1 docker-runc-debuginfo-1.0.0rc5+gitr3562_69663f0bd4b6-lp150.5.7.1 References: https://www.suse.com/security/cve/CVE-2019-5736.html https://bugzilla.suse.com/1121967 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:0255-1: important: Security update for systemd
by opensuse-security＠opensuse.org 27 Feb '19

27 Feb '19

openSUSE Security Update: Security update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0255-1 Rating: important References: #1117025 #1121563 #1122000 #1123333 #1123727 #1123892 #1124153 #1125352 Cross-References: CVE-2019-6454 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has 7 fixes is now available. Description: This update for systemd fixes the following issues: - CVE-2019-6454: Overlong DBUS messages could be used to crash systemd (bsc#1125352) - units: make sure initrd-cleanup.service terminates before switching to rootfs (bsc#1123333) - logind: fix bad error propagation - login: log session state "closing" (as well as New/Removed) - logind: fix borked r check - login: don't remove all devices from PID1 when only one was removed - login: we only allow opening character devices - login: correct comment in session_device_free() - login: remember that fds received from PID1 need to be removed eventually - login: fix FDNAME in call to sd_pid_notify_with_fds() - logind: fd 0 is a valid fd - logind: rework sd_eviocrevoke() - logind: check file is device node before using .st_rdev - logind: use the new FDSTOREREMOVE=1 sd_notify() message (bsc#1124153) - core: add a new sd_notify() message for removing fds from the FD store again - logind: make sure we don't trip up on half-initialized session devices (bsc#1123727) - fd-util: accept that kcmp might fail with EPERM/EACCES - core: Fix use after free case in load_from_path() (bsc#1121563) - core: include Found state in device dumps - device: fix serialization and deserialization of DeviceFound - fix path in btrfs rule (#6844) - assemble multidevice btrfs volumes without external tools (#6607) (bsc#1117025) - Update systemd-system.conf.xml (bsc#1122000) - units: inform user that the default target is started after exiting from rescue or emergency mode - core: free lines after reading them (bsc#1123892) - sd-bus: if we receive an invalid dbus message, ignore and proceeed - automount: don't pass non-blocking pipe to kernel. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-255=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libsystemd0-234-lp150.20.15.1 libsystemd0-debuginfo-234-lp150.20.15.1 libsystemd0-mini-234-lp150.20.15.1 libsystemd0-mini-debuginfo-234-lp150.20.15.1 libudev-devel-234-lp150.20.15.1 libudev-mini-devel-234-lp150.20.15.1 libudev-mini1-234-lp150.20.15.1 libudev-mini1-debuginfo-234-lp150.20.15.1 libudev1-234-lp150.20.15.1 libudev1-debuginfo-234-lp150.20.15.1 nss-myhostname-234-lp150.20.15.1 nss-myhostname-debuginfo-234-lp150.20.15.1 nss-mymachines-234-lp150.20.15.1 nss-mymachines-debuginfo-234-lp150.20.15.1 nss-systemd-234-lp150.20.15.1 nss-systemd-debuginfo-234-lp150.20.15.1 systemd-234-lp150.20.15.1 systemd-container-234-lp150.20.15.1 systemd-container-debuginfo-234-lp150.20.15.1 systemd-coredump-234-lp150.20.15.1 systemd-coredump-debuginfo-234-lp150.20.15.1 systemd-debuginfo-234-lp150.20.15.1 systemd-debugsource-234-lp150.20.15.1 systemd-devel-234-lp150.20.15.1 systemd-logger-234-lp150.20.15.1 systemd-mini-234-lp150.20.15.1 systemd-mini-container-mini-234-lp150.20.15.1 systemd-mini-container-mini-debuginfo-234-lp150.20.15.1 systemd-mini-coredump-mini-234-lp150.20.15.1 systemd-mini-coredump-mini-debuginfo-234-lp150.20.15.1 systemd-mini-debuginfo-234-lp150.20.15.1 systemd-mini-debugsource-234-lp150.20.15.1 systemd-mini-devel-234-lp150.20.15.1 systemd-mini-sysvinit-234-lp150.20.15.1 systemd-sysvinit-234-lp150.20.15.1 udev-234-lp150.20.15.1 udev-debuginfo-234-lp150.20.15.1 udev-mini-234-lp150.20.15.1 udev-mini-debuginfo-234-lp150.20.15.1 - openSUSE Leap 15.0 (noarch): systemd-bash-completion-234-lp150.20.15.1 systemd-mini-bash-completion-234-lp150.20.15.1 - openSUSE Leap 15.0 (x86_64): libsystemd0-32bit-234-lp150.20.15.1 libsystemd0-32bit-debuginfo-234-lp150.20.15.1 libudev-devel-32bit-234-lp150.20.15.1 libudev1-32bit-234-lp150.20.15.1 libudev1-32bit-debuginfo-234-lp150.20.15.1 nss-myhostname-32bit-234-lp150.20.15.1 nss-myhostname-32bit-debuginfo-234-lp150.20.15.1 nss-mymachines-32bit-234-lp150.20.15.1 nss-mymachines-32bit-debuginfo-234-lp150.20.15.1 systemd-32bit-234-lp150.20.15.1 systemd-32bit-debuginfo-234-lp150.20.15.1 References: https://www.suse.com/security/cve/CVE-2019-6454.html https://bugzilla.suse.com/1117025 https://bugzilla.suse.com/1121563 https://bugzilla.suse.com/1122000 https://bugzilla.suse.com/1123333 https://bugzilla.suse.com/1123727 https://bugzilla.suse.com/1123892 https://bugzilla.suse.com/1124153 https://bugzilla.suse.com/1125352 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:0251-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 27 Feb '19

27 Feb '19

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0251-1 Rating: important References: #1119105 #1122983 #1125330 Cross-References: CVE-2016-5824 CVE-2018-12405 CVE-2018-17466 CVE-2018-18335 CVE-2018-18356 CVE-2018-18492 CVE-2018-18493 CVE-2018-18494 CVE-2018-18498 CVE-2018-18500 CVE-2018-18501 CVE-2018-18505 CVE-2018-18509 CVE-2019-5785 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for MozillaThunderbird to version 60.5.1 fixes the following issues: Security vulnerabilities addressed (MSFA 2019-03 MSFA 2018-31 MFSA 2019-06 bsc#1122983 bsc#1119105 bsc#1125330): - CVE-2018-18356: Fixed a Use-after-free in Skia. - CVE-2019-5785: Fixed an Integer overflow in Skia. - CVE-2018-18335: Fixed a Buffer overflow in Skia by default deactivating Canvas 2D. This issue does not affect Linuc distributions. - CVE-2018-18509: Fixed a flaw which during verification of certain S/MIME signatures showing mistekenly that emails bring a valid sugnature. - CVE-2018-18500: Use-after-free parsing HTML5 stream - CVE-2018-18505: Privilege escalation through IPC channel messages - CVE-2016-5824 DoS (use-after-free) via a crafted ics file - CVE-2018-18501: Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5 - CVE-2018-17466: Buffer overflow and out-of-bounds read in ANGLE library with TextureStorage11 - CVE-2018-18492: Use-after-free with select element - CVE-2018-18493: Buffer overflow in accelerated 2D canvas with Skia - CVE-2018-18494: Same-origin policy violation using location attribute and performance.getEntries to steal cross-origin URLs - CVE-2018-18498: Integer overflow when calculating buffer sizes for images - CVE-2018-12405: Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4 Other bug fixes and changes: - FileLink provider WeTransfer to upload large attachments - Thunderbird now allows the addition of OpenSearch search engines from a local XML file using a minimal user interface: [+] button to select a file an add, [-] to remove. - More search engines: Google and DuckDuckGo available by default in some locales - During account creation, Thunderbird will now detect servers using the Microsoft Exchange protocol. It will offer the installation of a 3rd party add-on (Owl) which supports that protocol. - Thunderbird now compatible with other WebExtension-based FileLink add-ons like the Dropbox add-on - New WebExtensions FileLink API to facilitate add-ons - Fix decoding problems for messages with less common charsets (cp932, cp936) - New messages in the drafts folder (and other special or virtual folders) will no longer be included in the new messages notification - Thunderbird 60 will migrate security databases (key3.db, cert8.db to key4.db, cert9.db). - Address book search and auto-complete slowness - Plain text markup with * for bold, / for italics, _ for underline and | for code did not work when the enclosed text contained non-ASCII characters - While composing a message, a link not removed when link location was removed in the link properties panel - Encoding problems when exporting address books or messages using the system charset. Messages are now always exported using the UTF-8 encoding - If the "Date" header of a message was invalid, Jan 1970 or Dec 1969 was displayed. Now using date from "Received" header instead. - Body search/filtering didn't reliably ignore content of tags - Inappropriate warning "Thunderbird prevented the site (addons.thunderbird.net) from asking you to install software on your computer" when installing add-ons - Incorrect display of correspondents column since own email address was not always detected - Spurious 
 (encoded newline) inserted into drafts and sent email - Double-clicking on a word in the Write window sometimes launched the Advanced Property Editor or Link Properties dialog - Fixed Cookie removal - "Download rest of message" was not working if global inbox was used - Fix Encoding problems for users (especially in Poland) when a file was sent via a folder using "Sent to > Mail recipient" due to a problem in the Thunderbird MAPI interface - According to RFC 4616 and RFC 5721, passwords containing non-ASCII characters are encoded using UTF-8 which can lead to problems with non-compliant providers, for example office365.com. The SMTP LOGIN and POP3 USER/PASS authentication methods are now using a Latin-1 encoding again to work around this issue - Fix shutdown crash/hang after entering an empty IMAP password This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-251=1 Package List: - openSUSE Leap 15.0 (x86_64): MozillaThunderbird-60.5.1-lp150.3.30.1 MozillaThunderbird-buildsymbols-60.5.1-lp150.3.30.1 MozillaThunderbird-debuginfo-60.5.1-lp150.3.30.1 MozillaThunderbird-debugsource-60.5.1-lp150.3.30.1 MozillaThunderbird-translations-common-60.5.1-lp150.3.30.1 MozillaThunderbird-translations-other-60.5.1-lp150.3.30.1 References: https://www.suse.com/security/cve/CVE-2016-5824.html https://www.suse.com/security/cve/CVE-2018-12405.html https://www.suse.com/security/cve/CVE-2018-17466.html https://www.suse.com/security/cve/CVE-2018-18335.html https://www.suse.com/security/cve/CVE-2018-18356.html https://www.suse.com/security/cve/CVE-2018-18492.html https://www.suse.com/security/cve/CVE-2018-18493.html https://www.suse.com/security/cve/CVE-2018-18494.html https://www.suse.com/security/cve/CVE-2018-18498.html https://www.suse.com/security/cve/CVE-2018-18500.html https://www.suse.com/security/cve/CVE-2018-18501.html https://www.suse.com/security/cve/CVE-2018-18505.html https://www.suse.com/security/cve/CVE-2018-18509.html https://www.suse.com/security/cve/CVE-2019-5785.html https://bugzilla.suse.com/1119105 https://bugzilla.suse.com/1122983 https://bugzilla.suse.com/1125330 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:0249-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 26 Feb '19

26 Feb '19

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0249-1 Rating: important References: #1122983 #1125330 Cross-References: CVE-2016-5824 CVE-2018-12405 CVE-2018-17466 CVE-2018-18335 CVE-2018-18356 CVE-2018-18492 CVE-2018-18493 CVE-2018-18494 CVE-2018-18498 CVE-2018-18500 CVE-2018-18501 CVE-2018-18505 CVE-2018-18509 CVE-2019-5785 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for MozillaThunderbird to version 60.5.1 fixes the following issues: Security vulnerabilities addressed (MFSA 2019-03 MFSA 2018-31 bsc#1122983 and MFSA 2019-06 bsc#1125330): - CVE-2018-18356: Fixed a Use-after-free in Skia. - CVE-2019-5785: Fixed an Integer overflow in Skia. - CVE-2018-18335: Fixed a Buffer overflow in Skia by default deactivating Canvas 2D. This issue does not affect Linuc distributions. - CVE-2018-18509: Fixed a flaw which during verification of certain S/MIME signatures showing mistekenly that emails bring a valid sugnature. - CVE-2018-18500: Use-after-free parsing HTML5 stream - CVE-2018-18505: Privilege escalation through IPC channel messages - CVE-2016-5824: DoS (use-after-free) via a crafted ics file - CVE-2018-18501: Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5 - CVE-2018-17466: Buffer overflow and out-of-bounds read in ANGLE library with TextureStorage11 - CVE-2018-18492: Use-after-free with select element - CVE-2018-18493: Buffer overflow in accelerated 2D canvas with Skia - CVE-2018-18494: Same-origin policy violation using location attribute and performance.getEntries to steal cross-origin URLs - CVE-2018-18498: Integer overflow when calculating buffer sizes for images - CVE-2018-12405: Memory safety bugs Other bug fixes and changes: * FileLink provider WeTransfer to upload large attachments * Thunderbird now allows the addition of OpenSearch search engines from a local XML file using a minimal user inferface: [+] button to select a file an add, [-] to remove. * More search engines: Google and DuckDuckGo available by default in some locales * During account creation, Thunderbird will now detect servers using the Microsoft Exchange protocol. It will offer the installation of a 3rd party add-on (Owl) which supports that protocol. * Thunderbird now compatible with other WebExtension-based FileLink add-ons like the Dropbox add-on * New WebExtensions FileLink API to facilitate add-ons * Fix decoding problems for messages with less common charsets (cp932, cp936) * New messages in the drafts folder (and other special or virtual folders) will no longer be included in the new messages notification * Thunderbird 60 will migrate security databases (key3.db, cert8.db to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a fault that potentially deleted saved passwords and private certificate keys for users using a master password. Version 60.3.3 will prevent the loss of data; affected users who have already upgraded to version 60.3.2 or earlier can restore the deleted key3.db file from backup to complete the migration. * Address book search and auto-complete slowness introduced in Thunderbird 60.3.2 * Plain text markup with * for bold, / for italics, _ for underline and | for code did not work when the enclosed text contained non-ASCII characters * While composing a message, a link not removed when link location was removed in the link properties panel * Encoding problems when exporting address books or messages using the system charset. Messages are now always exported using the UTF-8 encoding * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969 was displayed. Now using date from "Received" header instead. * Body search/filtering didn't reliably ignore content of tags * Inappropriate warning "Thunderbird prevented the site (addons.thunderbird.net) from asking you to install software on your computer" when installing add-ons * Incorrect display of correspondents column since own email address was not always detected * Spurious 
 (encoded newline) inserted into drafts and sent email * Double-clicking on a word in the Write window sometimes launched the Advanced Property Editor or Link Properties dialog * Fixe Cookie removal * "Download rest of message" was not working if global inbox was used * Fix Encoding problems for users (especially in Poland) when a file was sent via a folder using "Sent to > Mail recipient" due to a problem in the Thunderbird MAPI interface * According to RFC 4616 and RFC 5721, passwords containing non-ASCII characters are encoded using UTF-8 which can lead to problems with non-compliant providers, for example office365.com. The SMTP LOGIN and POP3 USER/PASS authentication methods are now using a Latin-1 encoding again to work around this issue * Fix shutdown crash/hang after entering an empty IMAP password Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-249=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): MozillaThunderbird-60.5.1-79.1 MozillaThunderbird-buildsymbols-60.5.1-79.1 MozillaThunderbird-translations-common-60.5.1-79.1 MozillaThunderbird-translations-other-60.5.1-79.1 References: https://www.suse.com/security/cve/CVE-2016-5824.html https://www.suse.com/security/cve/CVE-2018-12405.html https://www.suse.com/security/cve/CVE-2018-17466.html https://www.suse.com/security/cve/CVE-2018-18335.html https://www.suse.com/security/cve/CVE-2018-18356.html https://www.suse.com/security/cve/CVE-2018-18492.html https://www.suse.com/security/cve/CVE-2018-18493.html https://www.suse.com/security/cve/CVE-2018-18494.html https://www.suse.com/security/cve/CVE-2018-18498.html https://www.suse.com/security/cve/CVE-2018-18500.html https://www.suse.com/security/cve/CVE-2018-18501.html https://www.suse.com/security/cve/CVE-2018-18505.html https://www.suse.com/security/cve/CVE-2018-18509.html https://www.suse.com/security/cve/CVE-2019-5785.html https://bugzilla.suse.com/1122983 https://bugzilla.suse.com/1125330 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:0248-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 26 Feb '19

26 Feb '19

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0248-1 Rating: important References: #1125330 Cross-References: CVE-2018-18356 CVE-2019-5785 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for MozillaFirefox to version 60.5.1esr fixes the following issues: Security vulnerabilities addressed (MFSA-2019-05, boo#1125330): - CVE-2018-18356: Fixed a use-after-free vulnerability in the Skia library that could occur when creating a path, leading to a potentially exploitable crash. - CVE-2019-5785: Fixed an integer overflow vulnerability in the Skia library that could occur after specific transform operations, leading to a potentially exploitable crash. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-248=1 Package List: - openSUSE Leap 15.0 (x86_64): MozillaFirefox-60.5.1-lp150.3.39.2 MozillaFirefox-branding-upstream-60.5.1-lp150.3.39.2 MozillaFirefox-buildsymbols-60.5.1-lp150.3.39.2 MozillaFirefox-debuginfo-60.5.1-lp150.3.39.2 MozillaFirefox-debugsource-60.5.1-lp150.3.39.2 MozillaFirefox-devel-60.5.1-lp150.3.39.2 MozillaFirefox-translations-common-60.5.1-lp150.3.39.2 MozillaFirefox-translations-other-60.5.1-lp150.3.39.2 References: https://www.suse.com/security/cve/CVE-2018-18356.html https://www.suse.com/security/cve/CVE-2019-5785.html https://bugzilla.suse.com/1125330 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:0250-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 26 Feb '19

26 Feb '19

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0250-1 Rating: important References: #1125330 Cross-References: CVE-2018-18335 CVE-2018-18356 CVE-2018-18509 CVE-2019-5785 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for MozillaThunderbird to version 60.5.1 fixes the following issues: Security issues fixed (MFSA 2019-06 bsc#1125330): - CVE-2018-18356: Fixed a Use-after-free in Skia. - CVE-2019-5785: Fixed an Integer overflow in Skia. - CVE-2018-18335: Fixed a Buffer overflow in Skia by default deactivating Canvas 2D. This issue does not affect Linuc distributions. - CVE-2018-18509: Fixed a flaw which during verification of certain S/MIME signatures showing mistekenly that emails bring a valid sugnature. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-250=1 Package List: - openSUSE Leap 42.3 (x86_64): MozillaThunderbird-60.5.1-86.1 MozillaThunderbird-buildsymbols-60.5.1-86.1 MozillaThunderbird-debuginfo-60.5.1-86.1 MozillaThunderbird-debugsource-60.5.1-86.1 MozillaThunderbird-translations-common-60.5.1-86.1 MozillaThunderbird-translations-other-60.5.1-86.1 References: https://www.suse.com/security/cve/CVE-2018-18335.html https://www.suse.com/security/cve/CVE-2018-18356.html https://www.suse.com/security/cve/CVE-2018-18509.html https://www.suse.com/security/cve/CVE-2019-5785.html https://bugzilla.suse.com/1125330 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0