April 2019 - openSUSE Security Announce

[security-announce] openSUSE-SU-2019:1295-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 29 Apr '19

29 Apr '19

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1295-1 Rating: moderate References: #1132053 #1132054 #1132055 #1132058 #1132060 #1132061 Cross-References: CVE-2019-11005 CVE-2019-11006 CVE-2019-11007 CVE-2019-11008 CVE-2019-11009 CVE-2019-11010 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for GraphicsMagick fixes the following issues: - CVE-2019-11005: Fixed a stack-based buffer overflow in SVGStartElement of coders/svg.c that allowed attackers to cause DOS or an unspecified impact (boo#1132058) - CVE-2019-11006: Fixed a heap-based buffer over-read in the function ReadMIFFImage of coders/miff.c that allowed attackers to cause DOS or information disclosure (boo#1132061) - CVE-2019-11010: Fixed a memory leak in ReadMPCImage of coders/mpc.c that which allowed attackers to cause DOS via a crafted image file (boo#1132055) - CVE-2019-11007: Fixed a heap-based buffer over-read in the ReadMNGImage function of coders/png.c that which allowed attackers to cause a denial of service or information disclosure (boo#1132060) - CVE-2019-11008: Fixed a heap-based buffer overflow in the function WriteXWDImage of coders/xwd.c that which allowed remote attackers to cause DOS or other unspecified impact (boo#1132054) - CVE-2019-11009: Fixed a heap-based buffer over-read in the function ReadXWDImage of coders/xwd.c that which allowed attackers to cause DOS or information disclosure (boo#1132053) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1295=1 Package List: - openSUSE Backports SLE-15 (x86_64): GraphicsMagick-1.3.29-bp150.2.18.1 GraphicsMagick-devel-1.3.29-bp150.2.18.1 libGraphicsMagick++-Q16-12-1.3.29-bp150.2.18.1 libGraphicsMagick++-devel-1.3.29-bp150.2.18.1 libGraphicsMagick-Q16-3-1.3.29-bp150.2.18.1 libGraphicsMagick3-config-1.3.29-bp150.2.18.1 libGraphicsMagickWand-Q16-2-1.3.29-bp150.2.18.1 perl-GraphicsMagick-1.3.29-bp150.2.18.1 References: https://www.suse.com/security/cve/CVE-2019-11005.html https://www.suse.com/security/cve/CVE-2019-11006.html https://www.suse.com/security/cve/CVE-2019-11007.html https://www.suse.com/security/cve/CVE-2019-11008.html https://www.suse.com/security/cve/CVE-2019-11009.html https://www.suse.com/security/cve/CVE-2019-11010.html https://bugzilla.suse.com/1132053 https://bugzilla.suse.com/1132054 https://bugzilla.suse.com/1132055 https://bugzilla.suse.com/1132058 https://bugzilla.suse.com/1132060 https://bugzilla.suse.com/1132061 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1292-1: moderate: Security update for samba
by opensuse-security＠opensuse.org 29 Apr '19

29 Apr '19

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1292-1 Rating: moderate References: #1099590 #1123755 #1124223 #1127153 #1131060 Cross-References: CVE-2019-3880 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has four fixes is now available. Description: This update for samba fixes the following issues: Security issue fixed: - CVE-2019-3880: Fixed a path/symlink traversal vulnerability, which allowed an unprivileged user to save registry files outside a share (bsc#1131060). Non-security issues fixed: - Fix vfs_ceph ftruncate and fallocate handling (bsc#1127153). - Abide by load_printers smb.conf parameter (bsc#1124223). - s3:winbindd: let normalize_name_map() call find_domain_from_name_noinit() (bsc#1123755). - s3:passdb: Do not return OK if we don't have pinfo set up (bsc#1099590). - s3:winbind: Fix regression (bsc#1123755). This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1292=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ctdb-4.6.16+git.154.2998451b912-27.1 ctdb-debuginfo-4.6.16+git.154.2998451b912-27.1 ctdb-tests-4.6.16+git.154.2998451b912-27.1 ctdb-tests-debuginfo-4.6.16+git.154.2998451b912-27.1 libdcerpc-binding0-4.6.16+git.154.2998451b912-27.1 libdcerpc-binding0-debuginfo-4.6.16+git.154.2998451b912-27.1 libdcerpc-devel-4.6.16+git.154.2998451b912-27.1 libdcerpc-samr-devel-4.6.16+git.154.2998451b912-27.1 libdcerpc-samr0-4.6.16+git.154.2998451b912-27.1 libdcerpc-samr0-debuginfo-4.6.16+git.154.2998451b912-27.1 libdcerpc0-4.6.16+git.154.2998451b912-27.1 libdcerpc0-debuginfo-4.6.16+git.154.2998451b912-27.1 libndr-devel-4.6.16+git.154.2998451b912-27.1 libndr-krb5pac-devel-4.6.16+git.154.2998451b912-27.1 libndr-krb5pac0-4.6.16+git.154.2998451b912-27.1 libndr-krb5pac0-debuginfo-4.6.16+git.154.2998451b912-27.1 libndr-nbt-devel-4.6.16+git.154.2998451b912-27.1 libndr-nbt0-4.6.16+git.154.2998451b912-27.1 libndr-nbt0-debuginfo-4.6.16+git.154.2998451b912-27.1 libndr-standard-devel-4.6.16+git.154.2998451b912-27.1 libndr-standard0-4.6.16+git.154.2998451b912-27.1 libndr-standard0-debuginfo-4.6.16+git.154.2998451b912-27.1 libndr0-4.6.16+git.154.2998451b912-27.1 libndr0-debuginfo-4.6.16+git.154.2998451b912-27.1 libnetapi-devel-4.6.16+git.154.2998451b912-27.1 libnetapi0-4.6.16+git.154.2998451b912-27.1 libnetapi0-debuginfo-4.6.16+git.154.2998451b912-27.1 libsamba-credentials-devel-4.6.16+git.154.2998451b912-27.1 libsamba-credentials0-4.6.16+git.154.2998451b912-27.1 libsamba-credentials0-debuginfo-4.6.16+git.154.2998451b912-27.1 libsamba-errors-devel-4.6.16+git.154.2998451b912-27.1 libsamba-errors0-4.6.16+git.154.2998451b912-27.1 libsamba-errors0-debuginfo-4.6.16+git.154.2998451b912-27.1 libsamba-hostconfig-devel-4.6.16+git.154.2998451b912-27.1 libsamba-hostconfig0-4.6.16+git.154.2998451b912-27.1 libsamba-hostconfig0-debuginfo-4.6.16+git.154.2998451b912-27.1 libsamba-passdb-devel-4.6.16+git.154.2998451b912-27.1 libsamba-passdb0-4.6.16+git.154.2998451b912-27.1 libsamba-passdb0-debuginfo-4.6.16+git.154.2998451b912-27.1 libsamba-policy-devel-4.6.16+git.154.2998451b912-27.1 libsamba-policy0-4.6.16+git.154.2998451b912-27.1 libsamba-policy0-debuginfo-4.6.16+git.154.2998451b912-27.1 libsamba-util-devel-4.6.16+git.154.2998451b912-27.1 libsamba-util0-4.6.16+git.154.2998451b912-27.1 libsamba-util0-debuginfo-4.6.16+git.154.2998451b912-27.1 libsamdb-devel-4.6.16+git.154.2998451b912-27.1 libsamdb0-4.6.16+git.154.2998451b912-27.1 libsamdb0-debuginfo-4.6.16+git.154.2998451b912-27.1 libsmbclient-devel-4.6.16+git.154.2998451b912-27.1 libsmbclient0-4.6.16+git.154.2998451b912-27.1 libsmbclient0-debuginfo-4.6.16+git.154.2998451b912-27.1 libsmbconf-devel-4.6.16+git.154.2998451b912-27.1 libsmbconf0-4.6.16+git.154.2998451b912-27.1 libsmbconf0-debuginfo-4.6.16+git.154.2998451b912-27.1 libsmbldap-devel-4.6.16+git.154.2998451b912-27.1 libsmbldap0-4.6.16+git.154.2998451b912-27.1 libsmbldap0-debuginfo-4.6.16+git.154.2998451b912-27.1 libtevent-util-devel-4.6.16+git.154.2998451b912-27.1 libtevent-util0-4.6.16+git.154.2998451b912-27.1 libtevent-util0-debuginfo-4.6.16+git.154.2998451b912-27.1 libwbclient-devel-4.6.16+git.154.2998451b912-27.1 libwbclient0-4.6.16+git.154.2998451b912-27.1 libwbclient0-debuginfo-4.6.16+git.154.2998451b912-27.1 samba-4.6.16+git.154.2998451b912-27.1 samba-client-4.6.16+git.154.2998451b912-27.1 samba-client-debuginfo-4.6.16+git.154.2998451b912-27.1 samba-core-devel-4.6.16+git.154.2998451b912-27.1 samba-debuginfo-4.6.16+git.154.2998451b912-27.1 samba-debugsource-4.6.16+git.154.2998451b912-27.1 samba-libs-4.6.16+git.154.2998451b912-27.1 samba-libs-debuginfo-4.6.16+git.154.2998451b912-27.1 samba-pidl-4.6.16+git.154.2998451b912-27.1 samba-python-4.6.16+git.154.2998451b912-27.1 samba-python-debuginfo-4.6.16+git.154.2998451b912-27.1 samba-test-4.6.16+git.154.2998451b912-27.1 samba-test-debuginfo-4.6.16+git.154.2998451b912-27.1 samba-winbind-4.6.16+git.154.2998451b912-27.1 samba-winbind-debuginfo-4.6.16+git.154.2998451b912-27.1 - openSUSE Leap 42.3 (x86_64): libdcerpc-binding0-32bit-4.6.16+git.154.2998451b912-27.1 libdcerpc-binding0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libdcerpc-samr0-32bit-4.6.16+git.154.2998451b912-27.1 libdcerpc-samr0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libdcerpc0-32bit-4.6.16+git.154.2998451b912-27.1 libdcerpc0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libndr-krb5pac0-32bit-4.6.16+git.154.2998451b912-27.1 libndr-krb5pac0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libndr-nbt0-32bit-4.6.16+git.154.2998451b912-27.1 libndr-nbt0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libndr-standard0-32bit-4.6.16+git.154.2998451b912-27.1 libndr-standard0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libndr0-32bit-4.6.16+git.154.2998451b912-27.1 libndr0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libnetapi0-32bit-4.6.16+git.154.2998451b912-27.1 libnetapi0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libsamba-credentials0-32bit-4.6.16+git.154.2998451b912-27.1 libsamba-credentials0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libsamba-errors0-32bit-4.6.16+git.154.2998451b912-27.1 libsamba-errors0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libsamba-hostconfig0-32bit-4.6.16+git.154.2998451b912-27.1 libsamba-hostconfig0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libsamba-passdb0-32bit-4.6.16+git.154.2998451b912-27.1 libsamba-passdb0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libsamba-policy0-32bit-4.6.16+git.154.2998451b912-27.1 libsamba-policy0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libsamba-util0-32bit-4.6.16+git.154.2998451b912-27.1 libsamba-util0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libsamdb0-32bit-4.6.16+git.154.2998451b912-27.1 libsamdb0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libsmbclient0-32bit-4.6.16+git.154.2998451b912-27.1 libsmbclient0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libsmbconf0-32bit-4.6.16+git.154.2998451b912-27.1 libsmbconf0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libsmbldap0-32bit-4.6.16+git.154.2998451b912-27.1 libsmbldap0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libtevent-util0-32bit-4.6.16+git.154.2998451b912-27.1 libtevent-util0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libwbclient0-32bit-4.6.16+git.154.2998451b912-27.1 libwbclient0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 samba-ceph-4.6.16+git.154.2998451b912-27.1 samba-ceph-debuginfo-4.6.16+git.154.2998451b912-27.1 samba-client-32bit-4.6.16+git.154.2998451b912-27.1 samba-client-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 samba-libs-32bit-4.6.16+git.154.2998451b912-27.1 samba-libs-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 samba-winbind-32bit-4.6.16+git.154.2998451b912-27.1 samba-winbind-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 - openSUSE Leap 42.3 (noarch): samba-doc-4.6.16+git.154.2998451b912-27.1 References: https://www.suse.com/security/cve/CVE-2019-3880.html https://bugzilla.suse.com/1099590 https://bugzilla.suse.com/1123755 https://bugzilla.suse.com/1124223 https://bugzilla.suse.com/1127153 https://bugzilla.suse.com/1131060 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1294-1: moderate: Security update for libvirt
by opensuse-security＠opensuse.org 29 Apr '19

29 Apr '19

openSUSE Security Update: Security update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1294-1 Rating: moderate References: #1120813 #1126325 #1127458 #1131595 #1131955 Cross-References: CVE-2019-3840 CVE-2019-3886 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has three fixes is now available. Description: This update for libvirt fixes the following issues: Security issues fixed: - CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent (bsc#1127458). - CVE-2019-3886: Fixed an information leak which allowed to retrieve the guest hostname under readonly mode (bsc#1131595). Other issue addressed: - cpu: add Skylake-Server and Skylake-Server-IBRS CPU models (FATE#327261, bsc#1131955) - libxl: save current memory value after successful balloon (bsc#1120813). - libxl: support Xen's max_grant_frames setting with maxGrantFrames attribute on the xenbus controller (bsc#1126325). - conf: add new 'xenbus' controller type This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1294=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libvirt-3.3.0-24.1 libvirt-admin-3.3.0-24.1 libvirt-admin-debuginfo-3.3.0-24.1 libvirt-client-3.3.0-24.1 libvirt-client-debuginfo-3.3.0-24.1 libvirt-daemon-3.3.0-24.1 libvirt-daemon-config-network-3.3.0-24.1 libvirt-daemon-config-nwfilter-3.3.0-24.1 libvirt-daemon-debuginfo-3.3.0-24.1 libvirt-daemon-driver-interface-3.3.0-24.1 libvirt-daemon-driver-interface-debuginfo-3.3.0-24.1 libvirt-daemon-driver-lxc-3.3.0-24.1 libvirt-daemon-driver-lxc-debuginfo-3.3.0-24.1 libvirt-daemon-driver-network-3.3.0-24.1 libvirt-daemon-driver-network-debuginfo-3.3.0-24.1 libvirt-daemon-driver-nodedev-3.3.0-24.1 libvirt-daemon-driver-nodedev-debuginfo-3.3.0-24.1 libvirt-daemon-driver-nwfilter-3.3.0-24.1 libvirt-daemon-driver-nwfilter-debuginfo-3.3.0-24.1 libvirt-daemon-driver-qemu-3.3.0-24.1 libvirt-daemon-driver-qemu-debuginfo-3.3.0-24.1 libvirt-daemon-driver-secret-3.3.0-24.1 libvirt-daemon-driver-secret-debuginfo-3.3.0-24.1 libvirt-daemon-driver-storage-3.3.0-24.1 libvirt-daemon-driver-storage-core-3.3.0-24.1 libvirt-daemon-driver-storage-core-debuginfo-3.3.0-24.1 libvirt-daemon-driver-storage-disk-3.3.0-24.1 libvirt-daemon-driver-storage-disk-debuginfo-3.3.0-24.1 libvirt-daemon-driver-storage-iscsi-3.3.0-24.1 libvirt-daemon-driver-storage-iscsi-debuginfo-3.3.0-24.1 libvirt-daemon-driver-storage-logical-3.3.0-24.1 libvirt-daemon-driver-storage-logical-debuginfo-3.3.0-24.1 libvirt-daemon-driver-storage-mpath-3.3.0-24.1 libvirt-daemon-driver-storage-mpath-debuginfo-3.3.0-24.1 libvirt-daemon-driver-storage-scsi-3.3.0-24.1 libvirt-daemon-driver-storage-scsi-debuginfo-3.3.0-24.1 libvirt-daemon-driver-uml-3.3.0-24.1 libvirt-daemon-driver-uml-debuginfo-3.3.0-24.1 libvirt-daemon-driver-vbox-3.3.0-24.1 libvirt-daemon-driver-vbox-debuginfo-3.3.0-24.1 libvirt-daemon-hooks-3.3.0-24.1 libvirt-daemon-lxc-3.3.0-24.1 libvirt-daemon-qemu-3.3.0-24.1 libvirt-daemon-uml-3.3.0-24.1 libvirt-daemon-vbox-3.3.0-24.1 libvirt-debugsource-3.3.0-24.1 libvirt-devel-3.3.0-24.1 libvirt-doc-3.3.0-24.1 libvirt-libs-3.3.0-24.1 libvirt-libs-debuginfo-3.3.0-24.1 libvirt-lock-sanlock-3.3.0-24.1 libvirt-lock-sanlock-debuginfo-3.3.0-24.1 libvirt-nss-3.3.0-24.1 libvirt-nss-debuginfo-3.3.0-24.1 - openSUSE Leap 42.3 (x86_64): libvirt-client-debuginfo-32bit-3.3.0-24.1 libvirt-daemon-driver-libxl-3.3.0-24.1 libvirt-daemon-driver-libxl-debuginfo-3.3.0-24.1 libvirt-daemon-driver-storage-rbd-3.3.0-24.1 libvirt-daemon-driver-storage-rbd-debuginfo-3.3.0-24.1 libvirt-daemon-xen-3.3.0-24.1 libvirt-devel-32bit-3.3.0-24.1 References: https://www.suse.com/security/cve/CVE-2019-3840.html https://www.suse.com/security/cve/CVE-2019-3886.html https://bugzilla.suse.com/1120813 https://bugzilla.suse.com/1126325 https://bugzilla.suse.com/1127458 https://bugzilla.suse.com/1131595 https://bugzilla.suse.com/1131955 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1293-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 29 Apr '19

29 Apr '19

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1293-1 Rating: moderate References: #1126711 #1126713 #1126821 #1126823 #1127122 #1128722 #1128883 #1128886 #1128887 #1128889 #1128892 #1129032 Cross-References: CVE-2018-20783 CVE-2019-9020 CVE-2019-9021 CVE-2019-9023 CVE-2019-9024 CVE-2019-9637 CVE-2019-9638 CVE-2019-9639 CVE-2019-9640 CVE-2019-9641 CVE-2019-9675 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves 11 vulnerabilities and has one errata is now available. Description: This update for php7 fixes the following issues: Security issues fixed: - CVE-2019-9637: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128892). - CVE-2019-9675: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128886). - CVE-2019-9638: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension ((bsc#1128889). - CVE-2019-9639: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128887). - CVE-2019-9640: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128883). - CVE-2019-9024: Fixed a vulnerability in xmlrpc_decode function which could allow to a hostile XMLRPC server to cause memory read outside the allocated areas (bsc#1126821). - CVE-2019-9020: Fixed a heap out of bounds in xmlrpc_decode function (bsc#1126711). - CVE-2018-20783: Fixed a buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1127122). - CVE-2019-9021: Fixed a heap buffer-based buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1126713). - CVE-2019-9023: Fixed multiple heap-based buffer over-read instances in mbstring regular expression functions (bsc#1126823). - CVE-2019-9641: Fixed multiple invalid memory access in EXIF extension and improved insecure implementation of rename function (bsc#1128722). Other issue addressed: - Deleted README.default_socket_timeout which is not needed anymore (bsc#1129032). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1293=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-mod_php7-7.0.7-58.1 apache2-mod_php7-debuginfo-7.0.7-58.1 php7-7.0.7-58.1 php7-bcmath-7.0.7-58.1 php7-bcmath-debuginfo-7.0.7-58.1 php7-bz2-7.0.7-58.1 php7-bz2-debuginfo-7.0.7-58.1 php7-calendar-7.0.7-58.1 php7-calendar-debuginfo-7.0.7-58.1 php7-ctype-7.0.7-58.1 php7-ctype-debuginfo-7.0.7-58.1 php7-curl-7.0.7-58.1 php7-curl-debuginfo-7.0.7-58.1 php7-dba-7.0.7-58.1 php7-dba-debuginfo-7.0.7-58.1 php7-debuginfo-7.0.7-58.1 php7-debugsource-7.0.7-58.1 php7-devel-7.0.7-58.1 php7-dom-7.0.7-58.1 php7-dom-debuginfo-7.0.7-58.1 php7-enchant-7.0.7-58.1 php7-enchant-debuginfo-7.0.7-58.1 php7-exif-7.0.7-58.1 php7-exif-debuginfo-7.0.7-58.1 php7-fastcgi-7.0.7-58.1 php7-fastcgi-debuginfo-7.0.7-58.1 php7-fileinfo-7.0.7-58.1 php7-fileinfo-debuginfo-7.0.7-58.1 php7-firebird-7.0.7-58.1 php7-firebird-debuginfo-7.0.7-58.1 php7-fpm-7.0.7-58.1 php7-fpm-debuginfo-7.0.7-58.1 php7-ftp-7.0.7-58.1 php7-ftp-debuginfo-7.0.7-58.1 php7-gd-7.0.7-58.1 php7-gd-debuginfo-7.0.7-58.1 php7-gettext-7.0.7-58.1 php7-gettext-debuginfo-7.0.7-58.1 php7-gmp-7.0.7-58.1 php7-gmp-debuginfo-7.0.7-58.1 php7-iconv-7.0.7-58.1 php7-iconv-debuginfo-7.0.7-58.1 php7-imap-7.0.7-58.1 php7-imap-debuginfo-7.0.7-58.1 php7-intl-7.0.7-58.1 php7-intl-debuginfo-7.0.7-58.1 php7-json-7.0.7-58.1 php7-json-debuginfo-7.0.7-58.1 php7-ldap-7.0.7-58.1 php7-ldap-debuginfo-7.0.7-58.1 php7-mbstring-7.0.7-58.1 php7-mbstring-debuginfo-7.0.7-58.1 php7-mcrypt-7.0.7-58.1 php7-mcrypt-debuginfo-7.0.7-58.1 php7-mysql-7.0.7-58.1 php7-mysql-debuginfo-7.0.7-58.1 php7-odbc-7.0.7-58.1 php7-odbc-debuginfo-7.0.7-58.1 php7-opcache-7.0.7-58.1 php7-opcache-debuginfo-7.0.7-58.1 php7-openssl-7.0.7-58.1 php7-openssl-debuginfo-7.0.7-58.1 php7-pcntl-7.0.7-58.1 php7-pcntl-debuginfo-7.0.7-58.1 php7-pdo-7.0.7-58.1 php7-pdo-debuginfo-7.0.7-58.1 php7-pgsql-7.0.7-58.1 php7-pgsql-debuginfo-7.0.7-58.1 php7-phar-7.0.7-58.1 php7-phar-debuginfo-7.0.7-58.1 php7-posix-7.0.7-58.1 php7-posix-debuginfo-7.0.7-58.1 php7-pspell-7.0.7-58.1 php7-pspell-debuginfo-7.0.7-58.1 php7-readline-7.0.7-58.1 php7-readline-debuginfo-7.0.7-58.1 php7-shmop-7.0.7-58.1 php7-shmop-debuginfo-7.0.7-58.1 php7-snmp-7.0.7-58.1 php7-snmp-debuginfo-7.0.7-58.1 php7-soap-7.0.7-58.1 php7-soap-debuginfo-7.0.7-58.1 php7-sockets-7.0.7-58.1 php7-sockets-debuginfo-7.0.7-58.1 php7-sqlite-7.0.7-58.1 php7-sqlite-debuginfo-7.0.7-58.1 php7-sysvmsg-7.0.7-58.1 php7-sysvmsg-debuginfo-7.0.7-58.1 php7-sysvsem-7.0.7-58.1 php7-sysvsem-debuginfo-7.0.7-58.1 php7-sysvshm-7.0.7-58.1 php7-sysvshm-debuginfo-7.0.7-58.1 php7-tidy-7.0.7-58.1 php7-tidy-debuginfo-7.0.7-58.1 php7-tokenizer-7.0.7-58.1 php7-tokenizer-debuginfo-7.0.7-58.1 php7-wddx-7.0.7-58.1 php7-wddx-debuginfo-7.0.7-58.1 php7-xmlreader-7.0.7-58.1 php7-xmlreader-debuginfo-7.0.7-58.1 php7-xmlrpc-7.0.7-58.1 php7-xmlrpc-debuginfo-7.0.7-58.1 php7-xmlwriter-7.0.7-58.1 php7-xmlwriter-debuginfo-7.0.7-58.1 php7-xsl-7.0.7-58.1 php7-xsl-debuginfo-7.0.7-58.1 php7-zip-7.0.7-58.1 php7-zip-debuginfo-7.0.7-58.1 php7-zlib-7.0.7-58.1 php7-zlib-debuginfo-7.0.7-58.1 - openSUSE Leap 42.3 (noarch): php7-pear-7.0.7-58.1 php7-pear-Archive_Tar-7.0.7-58.1 References: https://www.suse.com/security/cve/CVE-2018-20783.html https://www.suse.com/security/cve/CVE-2019-9020.html https://www.suse.com/security/cve/CVE-2019-9021.html https://www.suse.com/security/cve/CVE-2019-9023.html https://www.suse.com/security/cve/CVE-2019-9024.html https://www.suse.com/security/cve/CVE-2019-9637.html https://www.suse.com/security/cve/CVE-2019-9638.html https://www.suse.com/security/cve/CVE-2019-9639.html https://www.suse.com/security/cve/CVE-2019-9640.html https://www.suse.com/security/cve/CVE-2019-9641.html https://www.suse.com/security/cve/CVE-2019-9675.html https://bugzilla.suse.com/1126711 https://bugzilla.suse.com/1126713 https://bugzilla.suse.com/1126821 https://bugzilla.suse.com/1126823 https://bugzilla.suse.com/1127122 https://bugzilla.suse.com/1128722 https://bugzilla.suse.com/1128883 https://bugzilla.suse.com/1128886 https://bugzilla.suse.com/1128887 https://bugzilla.suse.com/1128889 https://bugzilla.suse.com/1128892 https://bugzilla.suse.com/1129032 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1291-1: important: Security update for libssh2_org
by opensuse-security＠opensuse.org 29 Apr '19

29 Apr '19

openSUSE Security Update: Security update for libssh2_org ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1291-1 Rating: important References: #1130103 #1133528 Cross-References: CVE-2019-3859 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for libssh2_org fixes the following issues: - Incorrect upstream fix for CVE-2019-3859 broke public key authentication [bsc#1133528, bsc#1130103] This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1291=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libssh2-1-1.8.0-lp150.3.6.1 libssh2-1-debuginfo-1.8.0-lp150.3.6.1 libssh2-devel-1.8.0-lp150.3.6.1 libssh2_org-debugsource-1.8.0-lp150.3.6.1 - openSUSE Leap 15.0 (x86_64): libssh2-1-32bit-1.8.0-lp150.3.6.1 libssh2-1-32bit-debuginfo-1.8.0-lp150.3.6.1 References: https://www.suse.com/security/cve/CVE-2019-3859.html https://bugzilla.suse.com/1130103 https://bugzilla.suse.com/1133528 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1290-1: important: Security update for libssh2_org
by opensuse-security＠opensuse.org 29 Apr '19

29 Apr '19

openSUSE Security Update: Security update for libssh2_org ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1290-1 Rating: important References: #1130103 #1133528 Cross-References: CVE-2019-3859 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for libssh2_org fixes the following issues: - Incorrect upstream fix for CVE-2019-3859 broke public key authentication [bsc#1133528, bsc#1130103] This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1290=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libssh2-1-1.4.3-19.6.1 libssh2-1-debuginfo-1.4.3-19.6.1 libssh2-devel-1.4.3-19.6.1 libssh2_org-debugsource-1.4.3-19.6.1 - openSUSE Leap 42.3 (x86_64): libssh2-1-32bit-1.4.3-19.6.1 libssh2-1-debuginfo-32bit-1.4.3-19.6.1 References: https://www.suse.com/security/cve/CVE-2019-3859.html https://bugzilla.suse.com/1130103 https://bugzilla.suse.com/1133528 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1288-1: important: Security update for libvirt
by opensuse-security＠opensuse.org 29 Apr '19

29 Apr '19

openSUSE Security Update: Security update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1288-1 Rating: important References: #1081516 #1102604 #1104662 #1106420 #1108086 #1108395 #1112182 #1117058 #1118952 #1120813 #1123642 #1124667 #1125665 #1126325 #1127458 #1130129 Cross-References: CVE-2019-3840 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has 15 fixes is now available. Description: This update for libvirt provides the following fixes: Security issue fixed: - CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent (bsc#1127458). Other issues addressed: - apparmor: reintroduce upstream lxc mount rules (bsc#1130129). - hook: encode incoming XML to UTF-8 before passing to lxml etree from string method (bsc#1123642). - supportconfig: collect rotated logs in /var/log/libvirt/* (bsc#1124667). - libxl: support Xen's max_grant_frames setting with maxGrantFrames attribute on the xenbus controller (bsc#1126325). - conf: added new 'xenbus' controller type - util: skip RDMA detection for non-PCI network devices (bsc#1112182). - qemu: don't use CAP_DAC_OVERRIDE capability if non-root (bsc#1125665). - qemu: fix issues related to restricted permissions on /dev/sev(bsc#1102604). - apparmor: add support for named profiles (bsc#1118952). - libxl: save current memory value after successful balloon (bsc#1120813). - apparmor: Fix ptrace rules. (bsc#1117058) - libxl: Add support for soft reset. (bsc#1081516) - libxl: Fix VM migration on busy hosts. (bsc#1108086) - qemu: Add support for SEV guests. (fate#325817) - util: Don't check for parallel iteration in hash-related functions. (bsc#1106420) - spec: Don't restart libvirt-guests when updating libvirt-client. (bsc#1104662) - Fix virNodeGetSEVInfo API crashing libvirtd on AMD SEV enabled hosts. (bsc#1108395) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1288=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libvirt-4.0.0-lp150.7.10.4 libvirt-admin-4.0.0-lp150.7.10.4 libvirt-admin-debuginfo-4.0.0-lp150.7.10.4 libvirt-client-4.0.0-lp150.7.10.4 libvirt-client-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-4.0.0-lp150.7.10.4 libvirt-daemon-config-network-4.0.0-lp150.7.10.4 libvirt-daemon-config-nwfilter-4.0.0-lp150.7.10.4 libvirt-daemon-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-interface-4.0.0-lp150.7.10.4 libvirt-daemon-driver-interface-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-lxc-4.0.0-lp150.7.10.4 libvirt-daemon-driver-lxc-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-network-4.0.0-lp150.7.10.4 libvirt-daemon-driver-network-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-nodedev-4.0.0-lp150.7.10.4 libvirt-daemon-driver-nodedev-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-nwfilter-4.0.0-lp150.7.10.4 libvirt-daemon-driver-nwfilter-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-qemu-4.0.0-lp150.7.10.4 libvirt-daemon-driver-qemu-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-secret-4.0.0-lp150.7.10.4 libvirt-daemon-driver-secret-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-core-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-core-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-disk-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-disk-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-iscsi-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-iscsi-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-logical-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-logical-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-mpath-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-mpath-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-scsi-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-scsi-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-uml-4.0.0-lp150.7.10.4 libvirt-daemon-driver-uml-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-vbox-4.0.0-lp150.7.10.4 libvirt-daemon-driver-vbox-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-hooks-4.0.0-lp150.7.10.4 libvirt-daemon-lxc-4.0.0-lp150.7.10.4 libvirt-daemon-qemu-4.0.0-lp150.7.10.4 libvirt-daemon-uml-4.0.0-lp150.7.10.4 libvirt-daemon-vbox-4.0.0-lp150.7.10.4 libvirt-debugsource-4.0.0-lp150.7.10.4 libvirt-devel-4.0.0-lp150.7.10.4 libvirt-doc-4.0.0-lp150.7.10.4 libvirt-libs-4.0.0-lp150.7.10.4 libvirt-libs-debuginfo-4.0.0-lp150.7.10.4 libvirt-lock-sanlock-4.0.0-lp150.7.10.4 libvirt-lock-sanlock-debuginfo-4.0.0-lp150.7.10.4 libvirt-nss-4.0.0-lp150.7.10.4 libvirt-nss-debuginfo-4.0.0-lp150.7.10.4 wireshark-plugin-libvirt-4.0.0-lp150.7.10.4 wireshark-plugin-libvirt-debuginfo-4.0.0-lp150.7.10.4 - openSUSE Leap 15.0 (x86_64): libvirt-client-32bit-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-libxl-4.0.0-lp150.7.10.4 libvirt-daemon-driver-libxl-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-rbd-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-rbd-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-xen-4.0.0-lp150.7.10.4 libvirt-devel-32bit-4.0.0-lp150.7.10.4 References: https://www.suse.com/security/cve/CVE-2019-3840.html https://bugzilla.suse.com/1081516 https://bugzilla.suse.com/1102604 https://bugzilla.suse.com/1104662 https://bugzilla.suse.com/1106420 https://bugzilla.suse.com/1108086 https://bugzilla.suse.com/1108395 https://bugzilla.suse.com/1112182 https://bugzilla.suse.com/1117058 https://bugzilla.suse.com/1118952 https://bugzilla.suse.com/1120813 https://bugzilla.suse.com/1123642 https://bugzilla.suse.com/1124667 https://bugzilla.suse.com/1125665 https://bugzilla.suse.com/1126325 https://bugzilla.suse.com/1127458 https://bugzilla.suse.com/1130129 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1284-1: moderate: Security update for ceph
by opensuse-security＠opensuse.org 27 Apr '19

27 Apr '19

openSUSE Security Update: Security update for ceph ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1284-1 Rating: moderate References: #1084645 #1086613 #1096748 #1099162 #1101262 #1111177 #1114567 #1114710 Cross-References: CVE-2018-10861 CVE-2018-1128 CVE-2018-1129 CVE-2018-14662 CVE-2018-16846 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has three fixes is now available. Description: This update for ceph version 13.2.4 fixes the following issues: Security issues fixed: - CVE-2018-14662: Fixed an issue with LUKS 'config-key' safety (bsc#1111177) - CVE-2018-10861: Fixed an authorization bypass on OSD pool ops in ceph-mon (bsc#1099162) - CVE-2018-1128: Fixed signature check bypass in cephx (bsc#1096748) - CVE-2018-1129: Fixed replay attack in cephx protocol (bsc#1096748) - CVE-2018-16846: Enforced bounds on max-keys/max-uploads/max-parts in rgw (bsc#1114710) Non-security issues fixed: - ceph-volume Python 3 fixes (bsc#1114567) - Fixed python3 module loading (bsc#1086613) - Fixed an issue where ceph build fails (bsc#1084645) - ceph's SPDK builds with march=native (bsc#1101262) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1284=1 Package List: - openSUSE Leap 15.0 (x86_64): ceph-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-base-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-base-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-common-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-common-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-debugsource-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-fuse-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-fuse-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-mds-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-mds-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-mgr-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-mgr-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-mon-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-mon-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-osd-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-osd-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-radosgw-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-radosgw-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-resource-agents-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-test-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-test-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-test-debugsource-13.2.4.125+gad802694f5-lp150.2.3.1 libcephfs-devel-13.2.4.125+gad802694f5-lp150.2.3.1 libcephfs2-13.2.4.125+gad802694f5-lp150.2.3.1 libcephfs2-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 librados-devel-13.2.4.125+gad802694f5-lp150.2.3.1 librados-devel-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 librados2-13.2.4.125+gad802694f5-lp150.2.3.1 librados2-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 libradosstriper-devel-13.2.4.125+gad802694f5-lp150.2.3.1 libradosstriper1-13.2.4.125+gad802694f5-lp150.2.3.1 libradosstriper1-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 librbd-devel-13.2.4.125+gad802694f5-lp150.2.3.1 librbd1-13.2.4.125+gad802694f5-lp150.2.3.1 librbd1-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 librgw-devel-13.2.4.125+gad802694f5-lp150.2.3.1 librgw2-13.2.4.125+gad802694f5-lp150.2.3.1 librgw2-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 python3-cephfs-13.2.4.125+gad802694f5-lp150.2.3.1 python3-cephfs-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 python3-rados-13.2.4.125+gad802694f5-lp150.2.3.1 python3-rados-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 python3-rbd-13.2.4.125+gad802694f5-lp150.2.3.1 python3-rbd-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 python3-rgw-13.2.4.125+gad802694f5-lp150.2.3.1 python3-rgw-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 rados-objclass-devel-13.2.4.125+gad802694f5-lp150.2.3.1 rbd-fuse-13.2.4.125+gad802694f5-lp150.2.3.1 rbd-fuse-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 rbd-mirror-13.2.4.125+gad802694f5-lp150.2.3.1 rbd-mirror-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 rbd-nbd-13.2.4.125+gad802694f5-lp150.2.3.1 rbd-nbd-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-10861.html https://www.suse.com/security/cve/CVE-2018-1128.html https://www.suse.com/security/cve/CVE-2018-1129.html https://www.suse.com/security/cve/CVE-2018-14662.html https://www.suse.com/security/cve/CVE-2018-16846.html https://bugzilla.suse.com/1084645 https://bugzilla.suse.com/1086613 https://bugzilla.suse.com/1096748 https://bugzilla.suse.com/1099162 https://bugzilla.suse.com/1101262 https://bugzilla.suse.com/1111177 https://bugzilla.suse.com/1114567 https://bugzilla.suse.com/1114710 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1283-1: Security update for xerces-c
by opensuse-security＠opensuse.org 26 Apr '19

26 Apr '19

openSUSE Security Update: Security update for xerces-c ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1283-1 Rating: low References: #1083630 Cross-References: CVE-2017-12627 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for xerces-c fixes the following issue: - CVE-2017-12627: Processing of external DTD paths could have resulted in a null pointer dereference under certain conditions (bsc#1083630) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1283=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libxerces-c-3_1-3.1.4-lp150.2.3.1 libxerces-c-3_1-debuginfo-3.1.4-lp150.2.3.1 libxerces-c-devel-3.1.4-lp150.2.3.1 xerces-c-3.1.4-lp150.2.3.1 xerces-c-debuginfo-3.1.4-lp150.2.3.1 xerces-c-debugsource-3.1.4-lp150.2.3.1 xerces-c-doc-3.1.4-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libxerces-c-3_1-32bit-3.1.4-lp150.2.3.1 libxerces-c-3_1-32bit-debuginfo-3.1.4-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2017-12627.html https://bugzilla.suse.com/1083630 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1281-1: important: Security update for wget
by opensuse-security＠opensuse.org 26 Apr '19

26 Apr '19

openSUSE Security Update: Security update for wget ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1281-1 Rating: important References: #1131493 Cross-References: CVE-2019-5953 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for wget fixes the following issues: Security issue fixed: - CVE-2019-5953: Fixed a buffer overflow vulnerability which might cause code execution (bsc#1131493). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1281=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): wget-1.14-18.1 wget-debuginfo-1.14-18.1 wget-debugsource-1.14-18.1 References: https://www.suse.com/security/cve/CVE-2019-5953.html https://bugzilla.suse.com/1131493 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1282-1: important: Security update for python3
by opensuse-security＠opensuse.org 26 Apr '19

26 Apr '19

openSUSE Security Update: Security update for python3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1282-1 Rating: important References: #1129346 Cross-References: CVE-2019-9636 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python3 fixes the following issues: Security issue fixed: - CVE-2019-9636: Fixed an information disclosure because of incorrect handling of Unicode encoding during NFKC normalization (bsc#1129346). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1282=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): python3-3.6.5-lp150.2.10.1 python3-curses-3.6.5-lp150.2.10.1 python3-curses-debuginfo-3.6.5-lp150.2.10.1 python3-dbm-3.6.5-lp150.2.10.1 python3-dbm-debuginfo-3.6.5-lp150.2.10.1 python3-debuginfo-3.6.5-lp150.2.10.1 python3-debugsource-3.6.5-lp150.2.10.1 python3-tk-3.6.5-lp150.2.10.1 python3-tk-debuginfo-3.6.5-lp150.2.10.1 - openSUSE Leap 15.0 (x86_64): python3-32bit-3.6.5-lp150.2.10.1 python3-32bit-debuginfo-3.6.5-lp150.2.10.1 References: https://www.suse.com/security/cve/CVE-2019-9636.html https://bugzilla.suse.com/1129346 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1277-1: moderate: Security update for kauth
by opensuse-security＠opensuse.org 26 Apr '19

26 Apr '19

openSUSE Security Update: Security update for kauth ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1277-1 Rating: moderate References: #1124863 Cross-References: CVE-2019-7443 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for kauth fixes the following issues: Security issue fixed: - CVE-2019-7443: Fixed an insecure handling of arguments in helpers by removing the support of passing gui variants (bsc#1124863). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1277=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): kauth-debugsource-5.45.0-bp150.8.2 kauth-devel-5.45.0-bp150.8.2 libKF5Auth5-5.45.0-bp150.8.2 libKF5Auth5-debuginfo-5.45.0-bp150.8.2 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x): libpolkit-qt5-1-1-0.112.0-bp150.3.6.1 libpolkit-qt5-1-devel-0.112.0-bp150.3.6.1 - openSUSE Backports SLE-15 (aarch64_ilp32): kauth-devel-64bit-5.45.0-bp150.8.2 libKF5Auth5-64bit-5.45.0-bp150.8.2 libKF5Auth5-64bit-debuginfo-5.45.0-bp150.8.2 libpolkit-qt5-1-1-64bit-0.112.0-bp150.3.6.1 libpolkit-qt5-1-devel-64bit-0.112.0-bp150.3.6.1 - openSUSE Backports SLE-15 (noarch): libKF5Auth5-lang-5.45.0-bp150.8.2 - openSUSE Backports SLE-15 (x86_64): libpolkit-qt5-1-1-0.112.0-bp150.3.6.2 libpolkit-qt5-1-devel-0.112.0-bp150.3.6.2 References: https://www.suse.com/security/cve/CVE-2019-7443.html https://bugzilla.suse.com/1124863 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1276-1: moderate: Security update for xmltooling
by opensuse-security＠opensuse.org 25 Apr '19

25 Apr '19

openSUSE Security Update: Security update for xmltooling ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1276-1 Rating: moderate References: #1129537 Cross-References: CVE-2019-9628 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for xmltooling fixes the following issue: Security issue fixed: - CVE-2019-9628: Fixed an improper handling of exception in XMLTooling library which could result in denial of service against the application using XMLTooling (bsc#1129537). This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1276=1 Package List: - openSUSE Leap 42.3 (x86_64): libxmltooling-devel-1.5.6-12.1 libxmltooling6-1.5.6-12.1 libxmltooling6-debuginfo-1.5.6-12.1 xmltooling-debugsource-1.5.6-12.1 xmltooling-schemas-1.5.6-12.1 References: https://www.suse.com/security/cve/CVE-2019-9628.html https://bugzilla.suse.com/1129537 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1274-1: important: Security update for qemu
by opensuse-security＠opensuse.org 25 Apr '19

25 Apr '19

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1274-1 Rating: important References: #1118900 #1125721 #1126455 #1129622 #1130675 #1131955 Cross-References: CVE-2018-20815 CVE-2019-3812 CVE-2019-8934 CVE-2019-9824 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves four vulnerabilities and has two fixes is now available. Description: This update for qemu fixes the following issues: Security issues fixed: - CVE-2019-9824: Fixed information leak in slirp (bsc#1129622). - CVE-2019-8934: Added method to specify whether or not to expose certain ppc64 hostinformation (bsc#1126455). - CVE-2019-3812: Fixed Out-of-bounds memory access and information leak in virtual monitor interface (bsc#1125721). - CVE-2018-20815: Fixed a denial of service possibility in device tree processing (bsc#1130675). Non-security issue fixed: - Backported Skylake-Server vcpu model support from qemu v2.11 (FATE#327261 bsc#1131955). - Added ability to set virtqueue size using virtqueue_size parameter (FATE#327255 bsc#1118900). This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1274=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): qemu-linux-user-2.9.1-59.1 qemu-linux-user-debuginfo-2.9.1-59.1 qemu-linux-user-debugsource-2.9.1-59.1 - openSUSE Leap 42.3 (noarch): qemu-ipxe-1.0.0+-59.1 qemu-seabios-1.10.2-59.1 qemu-sgabios-8-59.1 qemu-vgabios-1.10.2-59.1 - openSUSE Leap 42.3 (x86_64): qemu-2.9.1-59.1 qemu-arm-2.9.1-59.1 qemu-arm-debuginfo-2.9.1-59.1 qemu-block-curl-2.9.1-59.1 qemu-block-curl-debuginfo-2.9.1-59.1 qemu-block-dmg-2.9.1-59.1 qemu-block-dmg-debuginfo-2.9.1-59.1 qemu-block-iscsi-2.9.1-59.1 qemu-block-iscsi-debuginfo-2.9.1-59.1 qemu-block-rbd-2.9.1-59.1 qemu-block-rbd-debuginfo-2.9.1-59.1 qemu-block-ssh-2.9.1-59.1 qemu-block-ssh-debuginfo-2.9.1-59.1 qemu-debugsource-2.9.1-59.1 qemu-extra-2.9.1-59.1 qemu-extra-debuginfo-2.9.1-59.1 qemu-guest-agent-2.9.1-59.1 qemu-guest-agent-debuginfo-2.9.1-59.1 qemu-ksm-2.9.1-59.1 qemu-kvm-2.9.1-59.1 qemu-lang-2.9.1-59.1 qemu-ppc-2.9.1-59.1 qemu-ppc-debuginfo-2.9.1-59.1 qemu-s390-2.9.1-59.1 qemu-s390-debuginfo-2.9.1-59.1 qemu-testsuite-2.9.1-59.2 qemu-tools-2.9.1-59.1 qemu-tools-debuginfo-2.9.1-59.1 qemu-x86-2.9.1-59.1 qemu-x86-debuginfo-2.9.1-59.1 References: https://www.suse.com/security/cve/CVE-2018-20815.html https://www.suse.com/security/cve/CVE-2019-3812.html https://www.suse.com/security/cve/CVE-2019-8934.html https://www.suse.com/security/cve/CVE-2019-9824.html https://bugzilla.suse.com/1118900 https://bugzilla.suse.com/1125721 https://bugzilla.suse.com/1126455 https://bugzilla.suse.com/1129622 https://bugzilla.suse.com/1130675 https://bugzilla.suse.com/1131955 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1272-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 25 Apr '19

25 Apr '19

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1272-1 Rating: moderate References: #1132053 #1132054 #1132055 #1132058 #1132060 #1132061 Cross-References: CVE-2019-11005 CVE-2019-11006 CVE-2019-11007 CVE-2019-11008 CVE-2019-11009 CVE-2019-11010 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for GraphicsMagick fixes the following issues: - CVE-2019-11005: Fixed a stack-based buffer overflow in SVGStartElement of coders/svg.c that allowed attackers to cause DOS or an unspecified impact (boo#1132058) - CVE-2019-11006: Fixed a heap-based buffer over-read in the function ReadMIFFImage of coders/miff.c that allowed attackers to cause DOS or information disclosure (boo#1132061) - CVE-2019-11010: Fixed a memory leak in ReadMPCImage of coders/mpc.c that which allowed attackers to cause DOS via a crafted image file (boo#1132055) - CVE-2019-11007: Fixed a heap-based buffer over-read in the ReadMNGImage function of coders/png.c that which allowed attackers to cause a denial of service or information disclosure (boo#1132060) - CVE-2019-11008: Fixed a heap-based buffer overflow in the function WriteXWDImage of coders/xwd.c that which allowed remote attackers to cause DOS or other unspecified impact (boo#1132054) - CVE-2019-11009: Fixed a heap-based buffer over-read in the function ReadXWDImage of coders/xwd.c that which allowed attackers to cause DOS or information disclosure (boo#1132053) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1272=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1272=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): GraphicsMagick-1.3.25-132.1 GraphicsMagick-debuginfo-1.3.25-132.1 GraphicsMagick-debugsource-1.3.25-132.1 GraphicsMagick-devel-1.3.25-132.1 libGraphicsMagick++-Q16-12-1.3.25-132.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.25-132.1 libGraphicsMagick++-devel-1.3.25-132.1 libGraphicsMagick-Q16-3-1.3.25-132.1 libGraphicsMagick-Q16-3-debuginfo-1.3.25-132.1 libGraphicsMagick3-config-1.3.25-132.1 libGraphicsMagickWand-Q16-2-1.3.25-132.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.25-132.1 perl-GraphicsMagick-1.3.25-132.1 perl-GraphicsMagick-debuginfo-1.3.25-132.1 - openSUSE Leap 15.0 (x86_64): GraphicsMagick-1.3.29-lp150.3.25.1 GraphicsMagick-debuginfo-1.3.29-lp150.3.25.1 GraphicsMagick-debugsource-1.3.29-lp150.3.25.1 GraphicsMagick-devel-1.3.29-lp150.3.25.1 libGraphicsMagick++-Q16-12-1.3.29-lp150.3.25.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.29-lp150.3.25.1 libGraphicsMagick++-devel-1.3.29-lp150.3.25.1 libGraphicsMagick-Q16-3-1.3.29-lp150.3.25.1 libGraphicsMagick-Q16-3-debuginfo-1.3.29-lp150.3.25.1 libGraphicsMagick3-config-1.3.29-lp150.3.25.1 libGraphicsMagickWand-Q16-2-1.3.29-lp150.3.25.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.29-lp150.3.25.1 perl-GraphicsMagick-1.3.29-lp150.3.25.1 perl-GraphicsMagick-debuginfo-1.3.29-lp150.3.25.1 References: https://www.suse.com/security/cve/CVE-2019-11005.html https://www.suse.com/security/cve/CVE-2019-11006.html https://www.suse.com/security/cve/CVE-2019-11007.html https://www.suse.com/security/cve/CVE-2019-11008.html https://www.suse.com/security/cve/CVE-2019-11009.html https://www.suse.com/security/cve/CVE-2019-11010.html https://bugzilla.suse.com/1132053 https://bugzilla.suse.com/1132054 https://bugzilla.suse.com/1132055 https://bugzilla.suse.com/1132058 https://bugzilla.suse.com/1132060 https://bugzilla.suse.com/1132061 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1273-1: important: Security update for python
by opensuse-security＠opensuse.org 25 Apr '19

25 Apr '19

openSUSE Security Update: Security update for python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1273-1 Rating: important References: #1129346 #1130847 Cross-References: CVE-2019-9636 CVE-2019-9948 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for python fixes the following issues: Security issues fixed: - CVE-2019-9948: Fixed a 'file:' blacklist bypass in URIs by using the 'local-file:' scheme instead (bsc#1130847). - CVE-2019-9636: Fixed an information disclosure because of incorrect handling of Unicode encoding during NFKC normalization (bsc#1129346). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1273=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): python-2.7.14-lp150.6.10.1 python-curses-2.7.14-lp150.6.10.1 python-curses-debuginfo-2.7.14-lp150.6.10.1 python-debuginfo-2.7.14-lp150.6.10.1 python-debugsource-2.7.14-lp150.6.10.1 python-demo-2.7.14-lp150.6.10.1 python-gdbm-2.7.14-lp150.6.10.1 python-gdbm-debuginfo-2.7.14-lp150.6.10.1 python-idle-2.7.14-lp150.6.10.1 python-tk-2.7.14-lp150.6.10.1 python-tk-debuginfo-2.7.14-lp150.6.10.1 - openSUSE Leap 15.0 (x86_64): python-32bit-2.7.14-lp150.6.10.1 python-32bit-debuginfo-2.7.14-lp150.6.10.1 References: https://www.suse.com/security/cve/CVE-2019-9636.html https://www.suse.com/security/cve/CVE-2019-9948.html https://bugzilla.suse.com/1129346 https://bugzilla.suse.com/1130847 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1275-1: important: Security update for lxc, lxcfs
by opensuse-security＠opensuse.org 25 Apr '19

25 Apr '19

openSUSE Security Update: Security update for lxc, lxcfs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1275-1 Rating: important References: #1122185 #1131762 #988348 Cross-References: CVE-2018-6556 CVE-2019-5736 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for lxc, lxcfs to version 3.1.0 fixes the following issues: Security issues fixed: - CVE-2019-5736: Fixed a container breakout vulnerability (boo#1122185). - CVE-2018-6556: Enable setuid bit on lxc-user-nic (boo#988348). Non-security issues fixed: - Update to LXC 3.1.0. The changelog is far too long to include here, please look at https://linuxcontainers.org/. (boo#1131762) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1275=1 Package List: - openSUSE Leap 15.0 (x86_64): liblxc-devel-3.1.0-lp150.2.10.1 liblxc1-3.1.0-lp150.2.10.1 liblxc1-debuginfo-3.1.0-lp150.2.10.1 lxc-3.1.0-lp150.2.10.1 lxc-debuginfo-3.1.0-lp150.2.10.1 lxc-debugsource-3.1.0-lp150.2.10.1 lxcfs-3.0.3-lp150.2.3.1 lxcfs-debuginfo-3.0.3-lp150.2.3.1 lxcfs-debugsource-3.0.3-lp150.2.3.1 pam_cgfs-3.1.0-lp150.2.10.1 pam_cgfs-debuginfo-3.1.0-lp150.2.10.1 - openSUSE Leap 15.0 (noarch): lxc-bash-completion-3.1.0-lp150.2.10.1 lxcfs-hooks-lxc-3.0.3-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-6556.html https://www.suse.com/security/cve/CVE-2019-5736.html https://bugzilla.suse.com/1122185 https://bugzilla.suse.com/1131762 https://bugzilla.suse.com/988348 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1264-1: moderate: Security update for slurm
by opensuse-security＠opensuse.org 24 Apr '19

24 Apr '19

openSUSE Security Update: Security update for slurm ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1264-1 Rating: moderate References: #1123304 Cross-References: CVE-2019-6438 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for slurm to version 17.11.13 fixes the following issues: Security issue fixed: - CVE-2019-6438: Fixed a heap overflow on 32-bit systems in xmalloc (bsc#1123304). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1264=1 Package List: - openSUSE Leap 15.0 (x86_64): libpmi0-17.11.13-lp150.5.20.1 libpmi0-debuginfo-17.11.13-lp150.5.20.1 libslurm32-17.11.13-lp150.5.20.1 libslurm32-debuginfo-17.11.13-lp150.5.20.1 perl-slurm-17.11.13-lp150.5.20.1 perl-slurm-debuginfo-17.11.13-lp150.5.20.1 slurm-17.11.13-lp150.5.20.1 slurm-auth-none-17.11.13-lp150.5.20.1 slurm-auth-none-debuginfo-17.11.13-lp150.5.20.1 slurm-config-17.11.13-lp150.5.20.1 slurm-debuginfo-17.11.13-lp150.5.20.1 slurm-debugsource-17.11.13-lp150.5.20.1 slurm-devel-17.11.13-lp150.5.20.1 slurm-doc-17.11.13-lp150.5.20.1 slurm-lua-17.11.13-lp150.5.20.1 slurm-lua-debuginfo-17.11.13-lp150.5.20.1 slurm-munge-17.11.13-lp150.5.20.1 slurm-munge-debuginfo-17.11.13-lp150.5.20.1 slurm-node-17.11.13-lp150.5.20.1 slurm-node-debuginfo-17.11.13-lp150.5.20.1 slurm-openlava-17.11.13-lp150.5.20.1 slurm-pam_slurm-17.11.13-lp150.5.20.1 slurm-pam_slurm-debuginfo-17.11.13-lp150.5.20.1 slurm-plugins-17.11.13-lp150.5.20.1 slurm-plugins-debuginfo-17.11.13-lp150.5.20.1 slurm-seff-17.11.13-lp150.5.20.1 slurm-sjstat-17.11.13-lp150.5.20.1 slurm-slurmdbd-17.11.13-lp150.5.20.1 slurm-slurmdbd-debuginfo-17.11.13-lp150.5.20.1 slurm-sql-17.11.13-lp150.5.20.1 slurm-sql-debuginfo-17.11.13-lp150.5.20.1 slurm-sview-17.11.13-lp150.5.20.1 slurm-sview-debuginfo-17.11.13-lp150.5.20.1 slurm-torque-17.11.13-lp150.5.20.1 slurm-torque-debuginfo-17.11.13-lp150.5.20.1 References: https://www.suse.com/security/cve/CVE-2019-6438.html https://bugzilla.suse.com/1123304 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1265-1: Security update for openexr
by opensuse-security＠opensuse.org 24 Apr '19

24 Apr '19

openSUSE Security Update: Security update for openexr ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1265-1 Rating: low References: #1113455 Cross-References: CVE-2018-18444 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openexr fixes the following issues: Security issue fixed: - CVE-2018-18444: Fixed Out-of-bounds write in makeMultiView.cpp (bsc#1113455). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1265=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libIlmImf-2_2-23-2.2.1-lp150.2.3.1 libIlmImf-2_2-23-debuginfo-2.2.1-lp150.2.3.1 libIlmImfUtil-2_2-23-2.2.1-lp150.2.3.1 libIlmImfUtil-2_2-23-debuginfo-2.2.1-lp150.2.3.1 openexr-2.2.1-lp150.2.3.1 openexr-debuginfo-2.2.1-lp150.2.3.1 openexr-debugsource-2.2.1-lp150.2.3.1 openexr-devel-2.2.1-lp150.2.3.1 openexr-doc-2.2.1-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libIlmImf-2_2-23-32bit-2.2.1-lp150.2.3.1 libIlmImf-2_2-23-32bit-debuginfo-2.2.1-lp150.2.3.1 libIlmImfUtil-2_2-23-32bit-2.2.1-lp150.2.3.1 libIlmImfUtil-2_2-23-32bit-debuginfo-2.2.1-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-18444.html https://bugzilla.suse.com/1113455 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1261-1: moderate: Security update for SDL2
by opensuse-security＠opensuse.org 23 Apr '19

23 Apr '19

openSUSE Security Update: Security update for SDL2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1261-1 Rating: moderate References: #1124799 #1124800 #1124802 #1124803 #1124805 #1124806 #1124824 #1124825 #1124826 #1124827 #1125099 Cross-References: CVE-2019-7572 CVE-2019-7573 CVE-2019-7574 CVE-2019-7575 CVE-2019-7576 CVE-2019-7577 CVE-2019-7578 CVE-2019-7635 CVE-2019-7636 CVE-2019-7637 CVE-2019-7638 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: This update for SDL2 fixes the following issues: Security issues fixed: - CVE-2019-7572: Fixed a buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c.(bsc#1124806). - CVE-2019-7578: Fixed a heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c (bsc#1125099). - CVE-2019-7576: Fixed heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (bsc#1124799). - CVE-2019-7573: Fixed a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (bsc#1124805). - CVE-2019-7635: Fixed a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c. (bsc#1124827). - CVE-2019-7636: Fixed a heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c (bsc#1124826). - CVE-2019-7638: Fixed a heap-based buffer over-read in Map1toN in video/SDL_pixels.c (bsc#1124824). - CVE-2019-7574: Fixed a heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c (bsc#1124803). - CVE-2019-7575: Fixed a heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c (bsc#1124802). - CVE-2019-7637: Fixed a heap-based buffer overflow in SDL_FillRect function in SDL_surface.c (bsc#1124825). - CVE-2019-7577: Fixed a buffer over read in SDL_LoadWAV_RW in audio/SDL_wave.c (bsc#1124800). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1261=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): SDL2-debugsource-2.0.8-lp150.2.3.1 libSDL2-2_0-0-2.0.8-lp150.2.3.1 libSDL2-2_0-0-debuginfo-2.0.8-lp150.2.3.1 libSDL2-devel-2.0.8-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libSDL2-2_0-0-32bit-2.0.8-lp150.2.3.1 libSDL2-2_0-0-32bit-debuginfo-2.0.8-lp150.2.3.1 libSDL2-devel-32bit-2.0.8-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-7572.html https://www.suse.com/security/cve/CVE-2019-7573.html https://www.suse.com/security/cve/CVE-2019-7574.html https://www.suse.com/security/cve/CVE-2019-7575.html https://www.suse.com/security/cve/CVE-2019-7576.html https://www.suse.com/security/cve/CVE-2019-7577.html https://www.suse.com/security/cve/CVE-2019-7578.html https://www.suse.com/security/cve/CVE-2019-7635.html https://www.suse.com/security/cve/CVE-2019-7636.html https://www.suse.com/security/cve/CVE-2019-7637.html https://www.suse.com/security/cve/CVE-2019-7638.html https://bugzilla.suse.com/1124799 https://bugzilla.suse.com/1124800 https://bugzilla.suse.com/1124802 https://bugzilla.suse.com/1124803 https://bugzilla.suse.com/1124805 https://bugzilla.suse.com/1124806 https://bugzilla.suse.com/1124824 https://bugzilla.suse.com/1124825 https://bugzilla.suse.com/1124826 https://bugzilla.suse.com/1124827 https://bugzilla.suse.com/1125099 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1260-1: Security update for audiofile
by opensuse-security＠opensuse.org 23 Apr '19

23 Apr '19

openSUSE Security Update: Security update for audiofile ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1260-1 Rating: low References: #1100523 Cross-References: CVE-2018-13440 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for audiofile fixes the following issues: Security issue fixed: - CVE-2018-13440: Return AF_FAIL instead of causing NULL pointer dereferences later (bsc#1100523). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1260=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): audiofile-0.3.6-lp150.7.1 audiofile-debuginfo-0.3.6-lp150.7.1 audiofile-debugsource-0.3.6-lp150.7.1 audiofile-devel-0.3.6-lp150.7.1 audiofile-doc-0.3.6-lp150.7.1 libaudiofile1-0.3.6-lp150.7.1 libaudiofile1-debuginfo-0.3.6-lp150.7.1 - openSUSE Leap 15.0 (x86_64): audiofile-devel-32bit-0.3.6-lp150.7.1 libaudiofile1-32bit-0.3.6-lp150.7.1 libaudiofile1-32bit-debuginfo-0.3.6-lp150.7.1 References: https://www.suse.com/security/cve/CVE-2018-13440.html https://bugzilla.suse.com/1100523 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1259-1: moderate: Security update for libqt5-qtvirtualkeyboard
by opensuse-security＠opensuse.org 23 Apr '19

23 Apr '19

openSUSE Security Update: Security update for libqt5-qtvirtualkeyboard ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1259-1 Rating: moderate References: #1118593 Cross-References: CVE-2018-19865 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libqt5-qtvirtualkeyboard fixes the following issues: Security issue fixed: - CVE-2018-19865: Fixed an issue with verbose keypress logging (boo#1118593). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1259=1 Package List: - openSUSE Leap 15.0 (x86_64): libqt5-qtvirtualkeyboard-5.9.4-lp150.2.3.1 libqt5-qtvirtualkeyboard-debuginfo-5.9.4-lp150.2.3.1 libqt5-qtvirtualkeyboard-debugsource-5.9.4-lp150.2.3.1 libqt5-qtvirtualkeyboard-devel-5.9.4-lp150.2.3.1 libqt5-qtvirtualkeyboard-examples-5.9.4-lp150.2.3.1 libqt5-qtvirtualkeyboard-examples-debuginfo-5.9.4-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-19865.html https://bugzilla.suse.com/1118593 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1263-1: moderate: Security update for libqt5-qtvirtualkeyboard
by opensuse-security＠opensuse.org 23 Apr '19

23 Apr '19

openSUSE Security Update: Security update for libqt5-qtvirtualkeyboard ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1263-1 Rating: moderate References: #1118593 Cross-References: CVE-2018-19865 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libqt5-qtvirtualkeyboard fixes the following issues: Security issue fixed: - CVE-2018-19865: Fixed an issue with verbose keypress logging (boo#1118593). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1263=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): libqt5-qtvirtualkeyboard-5.9.4-bp150.3.3.1 libqt5-qtvirtualkeyboard-devel-5.9.4-bp150.3.3.1 libqt5-qtvirtualkeyboard-examples-5.9.4-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-19865.html https://bugzilla.suse.com/1118593 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1258-1: important: Security update for apache2
by opensuse-security＠opensuse.org 23 Apr '19

23 Apr '19

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1258-1 Rating: important References: #1131233 #1131237 #1131239 #1131241 #1131245 Cross-References: CVE-2019-0196 CVE-2019-0197 CVE-2019-0211 CVE-2019-0217 CVE-2019-0220 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for apache2 fixes the following issues: * CVE-2019-0220: The Apache HTTP server did not use a consistent strategy for URL normalization throughout all of its components. In particular, consecutive slashes were not always collapsed. Attackers could potentially abuse these inconsistencies to by-pass access control mechanisms and thus gain unauthorized access to protected parts of the service. [bsc#1131241] * CVE-2019-0217: A race condition in Apache's "mod_auth_digest" when running in a threaded server could have allowed users with valid credentials to authenticate using another username, bypassing configured access control restrictions. [bsc#1131239] * CVE-2019-0211: A flaw in the Apache HTTP Server allowed less-privileged child processes or threads to execute arbitrary code with the privileges of the parent process. Attackers with control over CGI scripts or extension modules run by the server could have abused this issue to potentially gain super user privileges. [bsc#1131233] * CVE-2019-0197: When HTTP/2 support was enabled in the Apache server for a 'http' host or H2Upgrade was enabled for h2 on a 'https' host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. This issue could have been abused to mount a denial-of-service attack. Servers that never enabled the h2 protocol or that only enabled it for https: and did not configure the "H2Upgrade on" are unaffected. [bsc#1131245] * CVE-2019-0196: Through specially crafted network input the Apache's http/2 request handler could be lead to access previously freed memory while determining the method of a request. This resulted in the request being misclassified and thus being processed incorrectly. [bsc#1131237] This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1258=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-2.4.23-49.1 apache2-debuginfo-2.4.23-49.1 apache2-debugsource-2.4.23-49.1 apache2-devel-2.4.23-49.1 apache2-event-2.4.23-49.1 apache2-event-debuginfo-2.4.23-49.1 apache2-example-pages-2.4.23-49.1 apache2-prefork-2.4.23-49.1 apache2-prefork-debuginfo-2.4.23-49.1 apache2-utils-2.4.23-49.1 apache2-utils-debuginfo-2.4.23-49.1 apache2-worker-2.4.23-49.1 apache2-worker-debuginfo-2.4.23-49.1 - openSUSE Leap 42.3 (noarch): apache2-doc-2.4.23-49.1 References: https://www.suse.com/security/cve/CVE-2019-0196.html https://www.suse.com/security/cve/CVE-2019-0197.html https://www.suse.com/security/cve/CVE-2019-0211.html https://www.suse.com/security/cve/CVE-2019-0217.html https://www.suse.com/security/cve/CVE-2019-0220.html https://bugzilla.suse.com/1131233 https://bugzilla.suse.com/1131237 https://bugzilla.suse.com/1131239 https://bugzilla.suse.com/1131241 https://bugzilla.suse.com/1131245 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1256-1: moderate: Security update for php5
by opensuse-security＠opensuse.org 23 Apr '19

23 Apr '19

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1256-1 Rating: moderate References: #1126711 #1126713 #1126821 #1126823 #1127122 #1128722 Cross-References: CVE-2018-20783 CVE-2019-9020 CVE-2019-9021 CVE-2019-9023 CVE-2019-9024 CVE-2019-9641 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for php5 fixes the following issues: Security issues fixed: - CVE-2019-9024: Fixed a vulnerability in xmlrpc_decode function which could allow to a hostile XMLRPC server to cause memory read outside the allocated areas (bsc#1126821). - CVE-2019-9020: Fixed a heap out of bounds in xmlrpc_decode function (bsc#1126711). - CVE-2018-20783: Fixed a buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1127122). - CVE-2019-9021: Fixed a heap buffer-based buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1126713). - CVE-2019-9023: Fixed multiple heap-based buffer over-read instances in mbstring regular expression functions (bsc#1126823). - CVE-2019-9641: Fixed multiple invalid memory access in EXIF extension and improved insecure implementation of rename function (bsc#1128722). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1256=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-mod_php5-5.5.14-115.1 apache2-mod_php5-debuginfo-5.5.14-115.1 php5-5.5.14-115.1 php5-bcmath-5.5.14-115.1 php5-bcmath-debuginfo-5.5.14-115.1 php5-bz2-5.5.14-115.1 php5-bz2-debuginfo-5.5.14-115.1 php5-calendar-5.5.14-115.1 php5-calendar-debuginfo-5.5.14-115.1 php5-ctype-5.5.14-115.1 php5-ctype-debuginfo-5.5.14-115.1 php5-curl-5.5.14-115.1 php5-curl-debuginfo-5.5.14-115.1 php5-dba-5.5.14-115.1 php5-dba-debuginfo-5.5.14-115.1 php5-debuginfo-5.5.14-115.1 php5-debugsource-5.5.14-115.1 php5-devel-5.5.14-115.1 php5-dom-5.5.14-115.1 php5-dom-debuginfo-5.5.14-115.1 php5-enchant-5.5.14-115.1 php5-enchant-debuginfo-5.5.14-115.1 php5-exif-5.5.14-115.1 php5-exif-debuginfo-5.5.14-115.1 php5-fastcgi-5.5.14-115.1 php5-fastcgi-debuginfo-5.5.14-115.1 php5-fileinfo-5.5.14-115.1 php5-fileinfo-debuginfo-5.5.14-115.1 php5-firebird-5.5.14-115.1 php5-firebird-debuginfo-5.5.14-115.1 php5-fpm-5.5.14-115.1 php5-fpm-debuginfo-5.5.14-115.1 php5-ftp-5.5.14-115.1 php5-ftp-debuginfo-5.5.14-115.1 php5-gd-5.5.14-115.1 php5-gd-debuginfo-5.5.14-115.1 php5-gettext-5.5.14-115.1 php5-gettext-debuginfo-5.5.14-115.1 php5-gmp-5.5.14-115.1 php5-gmp-debuginfo-5.5.14-115.1 php5-iconv-5.5.14-115.1 php5-iconv-debuginfo-5.5.14-115.1 php5-imap-5.5.14-115.1 php5-imap-debuginfo-5.5.14-115.1 php5-intl-5.5.14-115.1 php5-intl-debuginfo-5.5.14-115.1 php5-json-5.5.14-115.1 php5-json-debuginfo-5.5.14-115.1 php5-ldap-5.5.14-115.1 php5-ldap-debuginfo-5.5.14-115.1 php5-mbstring-5.5.14-115.1 php5-mbstring-debuginfo-5.5.14-115.1 php5-mcrypt-5.5.14-115.1 php5-mcrypt-debuginfo-5.5.14-115.1 php5-mssql-5.5.14-115.1 php5-mssql-debuginfo-5.5.14-115.1 php5-mysql-5.5.14-115.1 php5-mysql-debuginfo-5.5.14-115.1 php5-odbc-5.5.14-115.1 php5-odbc-debuginfo-5.5.14-115.1 php5-opcache-5.5.14-115.1 php5-opcache-debuginfo-5.5.14-115.1 php5-openssl-5.5.14-115.1 php5-openssl-debuginfo-5.5.14-115.1 php5-pcntl-5.5.14-115.1 php5-pcntl-debuginfo-5.5.14-115.1 php5-pdo-5.5.14-115.1 php5-pdo-debuginfo-5.5.14-115.1 php5-pgsql-5.5.14-115.1 php5-pgsql-debuginfo-5.5.14-115.1 php5-phar-5.5.14-115.1 php5-phar-debuginfo-5.5.14-115.1 php5-posix-5.5.14-115.1 php5-posix-debuginfo-5.5.14-115.1 php5-pspell-5.5.14-115.1 php5-pspell-debuginfo-5.5.14-115.1 php5-readline-5.5.14-115.1 php5-readline-debuginfo-5.5.14-115.1 php5-shmop-5.5.14-115.1 php5-shmop-debuginfo-5.5.14-115.1 php5-snmp-5.5.14-115.1 php5-snmp-debuginfo-5.5.14-115.1 php5-soap-5.5.14-115.1 php5-soap-debuginfo-5.5.14-115.1 php5-sockets-5.5.14-115.1 php5-sockets-debuginfo-5.5.14-115.1 php5-sqlite-5.5.14-115.1 php5-sqlite-debuginfo-5.5.14-115.1 php5-suhosin-5.5.14-115.1 php5-suhosin-debuginfo-5.5.14-115.1 php5-sysvmsg-5.5.14-115.1 php5-sysvmsg-debuginfo-5.5.14-115.1 php5-sysvsem-5.5.14-115.1 php5-sysvsem-debuginfo-5.5.14-115.1 php5-sysvshm-5.5.14-115.1 php5-sysvshm-debuginfo-5.5.14-115.1 php5-tidy-5.5.14-115.1 php5-tidy-debuginfo-5.5.14-115.1 php5-tokenizer-5.5.14-115.1 php5-tokenizer-debuginfo-5.5.14-115.1 php5-wddx-5.5.14-115.1 php5-wddx-debuginfo-5.5.14-115.1 php5-xmlreader-5.5.14-115.1 php5-xmlreader-debuginfo-5.5.14-115.1 php5-xmlrpc-5.5.14-115.1 php5-xmlrpc-debuginfo-5.5.14-115.1 php5-xmlwriter-5.5.14-115.1 php5-xmlwriter-debuginfo-5.5.14-115.1 php5-xsl-5.5.14-115.1 php5-xsl-debuginfo-5.5.14-115.1 php5-zip-5.5.14-115.1 php5-zip-debuginfo-5.5.14-115.1 php5-zlib-5.5.14-115.1 php5-zlib-debuginfo-5.5.14-115.1 - openSUSE Leap 42.3 (noarch): php5-pear-5.5.14-115.1 References: https://www.suse.com/security/cve/CVE-2018-20783.html https://www.suse.com/security/cve/CVE-2019-9020.html https://www.suse.com/security/cve/CVE-2019-9021.html https://www.suse.com/security/cve/CVE-2019-9023.html https://www.suse.com/security/cve/CVE-2019-9024.html https://www.suse.com/security/cve/CVE-2019-9641.html https://bugzilla.suse.com/1126711 https://bugzilla.suse.com/1126713 https://bugzilla.suse.com/1126821 https://bugzilla.suse.com/1126823 https://bugzilla.suse.com/1127122 https://bugzilla.suse.com/1128722 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0