April 2019 - openSUSE Security Announce

[security-announce] openSUSE-SU-2019:1260-1: Security update for audiofile
by opensuse-security＠opensuse.org 23 Apr '19

23 Apr '19

openSUSE Security Update: Security update for audiofile ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1260-1 Rating: low References: #1100523 Cross-References: CVE-2018-13440 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for audiofile fixes the following issues: Security issue fixed: - CVE-2018-13440: Return AF_FAIL instead of causing NULL pointer dereferences later (bsc#1100523). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1260=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): audiofile-0.3.6-lp150.7.1 audiofile-debuginfo-0.3.6-lp150.7.1 audiofile-debugsource-0.3.6-lp150.7.1 audiofile-devel-0.3.6-lp150.7.1 audiofile-doc-0.3.6-lp150.7.1 libaudiofile1-0.3.6-lp150.7.1 libaudiofile1-debuginfo-0.3.6-lp150.7.1 - openSUSE Leap 15.0 (x86_64): audiofile-devel-32bit-0.3.6-lp150.7.1 libaudiofile1-32bit-0.3.6-lp150.7.1 libaudiofile1-32bit-debuginfo-0.3.6-lp150.7.1 References: https://www.suse.com/security/cve/CVE-2018-13440.html https://bugzilla.suse.com/1100523 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1259-1: moderate: Security update for libqt5-qtvirtualkeyboard
by opensuse-security＠opensuse.org 23 Apr '19

23 Apr '19

openSUSE Security Update: Security update for libqt5-qtvirtualkeyboard ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1259-1 Rating: moderate References: #1118593 Cross-References: CVE-2018-19865 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libqt5-qtvirtualkeyboard fixes the following issues: Security issue fixed: - CVE-2018-19865: Fixed an issue with verbose keypress logging (boo#1118593). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1259=1 Package List: - openSUSE Leap 15.0 (x86_64): libqt5-qtvirtualkeyboard-5.9.4-lp150.2.3.1 libqt5-qtvirtualkeyboard-debuginfo-5.9.4-lp150.2.3.1 libqt5-qtvirtualkeyboard-debugsource-5.9.4-lp150.2.3.1 libqt5-qtvirtualkeyboard-devel-5.9.4-lp150.2.3.1 libqt5-qtvirtualkeyboard-examples-5.9.4-lp150.2.3.1 libqt5-qtvirtualkeyboard-examples-debuginfo-5.9.4-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-19865.html https://bugzilla.suse.com/1118593 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1263-1: moderate: Security update for libqt5-qtvirtualkeyboard
by opensuse-security＠opensuse.org 23 Apr '19

23 Apr '19

openSUSE Security Update: Security update for libqt5-qtvirtualkeyboard ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1263-1 Rating: moderate References: #1118593 Cross-References: CVE-2018-19865 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libqt5-qtvirtualkeyboard fixes the following issues: Security issue fixed: - CVE-2018-19865: Fixed an issue with verbose keypress logging (boo#1118593). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1263=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): libqt5-qtvirtualkeyboard-5.9.4-bp150.3.3.1 libqt5-qtvirtualkeyboard-devel-5.9.4-bp150.3.3.1 libqt5-qtvirtualkeyboard-examples-5.9.4-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-19865.html https://bugzilla.suse.com/1118593 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1258-1: important: Security update for apache2
by opensuse-security＠opensuse.org 23 Apr '19

23 Apr '19

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1258-1 Rating: important References: #1131233 #1131237 #1131239 #1131241 #1131245 Cross-References: CVE-2019-0196 CVE-2019-0197 CVE-2019-0211 CVE-2019-0217 CVE-2019-0220 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for apache2 fixes the following issues: * CVE-2019-0220: The Apache HTTP server did not use a consistent strategy for URL normalization throughout all of its components. In particular, consecutive slashes were not always collapsed. Attackers could potentially abuse these inconsistencies to by-pass access control mechanisms and thus gain unauthorized access to protected parts of the service. [bsc#1131241] * CVE-2019-0217: A race condition in Apache's "mod_auth_digest" when running in a threaded server could have allowed users with valid credentials to authenticate using another username, bypassing configured access control restrictions. [bsc#1131239] * CVE-2019-0211: A flaw in the Apache HTTP Server allowed less-privileged child processes or threads to execute arbitrary code with the privileges of the parent process. Attackers with control over CGI scripts or extension modules run by the server could have abused this issue to potentially gain super user privileges. [bsc#1131233] * CVE-2019-0197: When HTTP/2 support was enabled in the Apache server for a 'http' host or H2Upgrade was enabled for h2 on a 'https' host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. This issue could have been abused to mount a denial-of-service attack. Servers that never enabled the h2 protocol or that only enabled it for https: and did not configure the "H2Upgrade on" are unaffected. [bsc#1131245] * CVE-2019-0196: Through specially crafted network input the Apache's http/2 request handler could be lead to access previously freed memory while determining the method of a request. This resulted in the request being misclassified and thus being processed incorrectly. [bsc#1131237] This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1258=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-2.4.23-49.1 apache2-debuginfo-2.4.23-49.1 apache2-debugsource-2.4.23-49.1 apache2-devel-2.4.23-49.1 apache2-event-2.4.23-49.1 apache2-event-debuginfo-2.4.23-49.1 apache2-example-pages-2.4.23-49.1 apache2-prefork-2.4.23-49.1 apache2-prefork-debuginfo-2.4.23-49.1 apache2-utils-2.4.23-49.1 apache2-utils-debuginfo-2.4.23-49.1 apache2-worker-2.4.23-49.1 apache2-worker-debuginfo-2.4.23-49.1 - openSUSE Leap 42.3 (noarch): apache2-doc-2.4.23-49.1 References: https://www.suse.com/security/cve/CVE-2019-0196.html https://www.suse.com/security/cve/CVE-2019-0197.html https://www.suse.com/security/cve/CVE-2019-0211.html https://www.suse.com/security/cve/CVE-2019-0217.html https://www.suse.com/security/cve/CVE-2019-0220.html https://bugzilla.suse.com/1131233 https://bugzilla.suse.com/1131237 https://bugzilla.suse.com/1131239 https://bugzilla.suse.com/1131241 https://bugzilla.suse.com/1131245 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1256-1: moderate: Security update for php5
by opensuse-security＠opensuse.org 23 Apr '19

23 Apr '19

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1256-1 Rating: moderate References: #1126711 #1126713 #1126821 #1126823 #1127122 #1128722 Cross-References: CVE-2018-20783 CVE-2019-9020 CVE-2019-9021 CVE-2019-9023 CVE-2019-9024 CVE-2019-9641 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for php5 fixes the following issues: Security issues fixed: - CVE-2019-9024: Fixed a vulnerability in xmlrpc_decode function which could allow to a hostile XMLRPC server to cause memory read outside the allocated areas (bsc#1126821). - CVE-2019-9020: Fixed a heap out of bounds in xmlrpc_decode function (bsc#1126711). - CVE-2018-20783: Fixed a buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1127122). - CVE-2019-9021: Fixed a heap buffer-based buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1126713). - CVE-2019-9023: Fixed multiple heap-based buffer over-read instances in mbstring regular expression functions (bsc#1126823). - CVE-2019-9641: Fixed multiple invalid memory access in EXIF extension and improved insecure implementation of rename function (bsc#1128722). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1256=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-mod_php5-5.5.14-115.1 apache2-mod_php5-debuginfo-5.5.14-115.1 php5-5.5.14-115.1 php5-bcmath-5.5.14-115.1 php5-bcmath-debuginfo-5.5.14-115.1 php5-bz2-5.5.14-115.1 php5-bz2-debuginfo-5.5.14-115.1 php5-calendar-5.5.14-115.1 php5-calendar-debuginfo-5.5.14-115.1 php5-ctype-5.5.14-115.1 php5-ctype-debuginfo-5.5.14-115.1 php5-curl-5.5.14-115.1 php5-curl-debuginfo-5.5.14-115.1 php5-dba-5.5.14-115.1 php5-dba-debuginfo-5.5.14-115.1 php5-debuginfo-5.5.14-115.1 php5-debugsource-5.5.14-115.1 php5-devel-5.5.14-115.1 php5-dom-5.5.14-115.1 php5-dom-debuginfo-5.5.14-115.1 php5-enchant-5.5.14-115.1 php5-enchant-debuginfo-5.5.14-115.1 php5-exif-5.5.14-115.1 php5-exif-debuginfo-5.5.14-115.1 php5-fastcgi-5.5.14-115.1 php5-fastcgi-debuginfo-5.5.14-115.1 php5-fileinfo-5.5.14-115.1 php5-fileinfo-debuginfo-5.5.14-115.1 php5-firebird-5.5.14-115.1 php5-firebird-debuginfo-5.5.14-115.1 php5-fpm-5.5.14-115.1 php5-fpm-debuginfo-5.5.14-115.1 php5-ftp-5.5.14-115.1 php5-ftp-debuginfo-5.5.14-115.1 php5-gd-5.5.14-115.1 php5-gd-debuginfo-5.5.14-115.1 php5-gettext-5.5.14-115.1 php5-gettext-debuginfo-5.5.14-115.1 php5-gmp-5.5.14-115.1 php5-gmp-debuginfo-5.5.14-115.1 php5-iconv-5.5.14-115.1 php5-iconv-debuginfo-5.5.14-115.1 php5-imap-5.5.14-115.1 php5-imap-debuginfo-5.5.14-115.1 php5-intl-5.5.14-115.1 php5-intl-debuginfo-5.5.14-115.1 php5-json-5.5.14-115.1 php5-json-debuginfo-5.5.14-115.1 php5-ldap-5.5.14-115.1 php5-ldap-debuginfo-5.5.14-115.1 php5-mbstring-5.5.14-115.1 php5-mbstring-debuginfo-5.5.14-115.1 php5-mcrypt-5.5.14-115.1 php5-mcrypt-debuginfo-5.5.14-115.1 php5-mssql-5.5.14-115.1 php5-mssql-debuginfo-5.5.14-115.1 php5-mysql-5.5.14-115.1 php5-mysql-debuginfo-5.5.14-115.1 php5-odbc-5.5.14-115.1 php5-odbc-debuginfo-5.5.14-115.1 php5-opcache-5.5.14-115.1 php5-opcache-debuginfo-5.5.14-115.1 php5-openssl-5.5.14-115.1 php5-openssl-debuginfo-5.5.14-115.1 php5-pcntl-5.5.14-115.1 php5-pcntl-debuginfo-5.5.14-115.1 php5-pdo-5.5.14-115.1 php5-pdo-debuginfo-5.5.14-115.1 php5-pgsql-5.5.14-115.1 php5-pgsql-debuginfo-5.5.14-115.1 php5-phar-5.5.14-115.1 php5-phar-debuginfo-5.5.14-115.1 php5-posix-5.5.14-115.1 php5-posix-debuginfo-5.5.14-115.1 php5-pspell-5.5.14-115.1 php5-pspell-debuginfo-5.5.14-115.1 php5-readline-5.5.14-115.1 php5-readline-debuginfo-5.5.14-115.1 php5-shmop-5.5.14-115.1 php5-shmop-debuginfo-5.5.14-115.1 php5-snmp-5.5.14-115.1 php5-snmp-debuginfo-5.5.14-115.1 php5-soap-5.5.14-115.1 php5-soap-debuginfo-5.5.14-115.1 php5-sockets-5.5.14-115.1 php5-sockets-debuginfo-5.5.14-115.1 php5-sqlite-5.5.14-115.1 php5-sqlite-debuginfo-5.5.14-115.1 php5-suhosin-5.5.14-115.1 php5-suhosin-debuginfo-5.5.14-115.1 php5-sysvmsg-5.5.14-115.1 php5-sysvmsg-debuginfo-5.5.14-115.1 php5-sysvsem-5.5.14-115.1 php5-sysvsem-debuginfo-5.5.14-115.1 php5-sysvshm-5.5.14-115.1 php5-sysvshm-debuginfo-5.5.14-115.1 php5-tidy-5.5.14-115.1 php5-tidy-debuginfo-5.5.14-115.1 php5-tokenizer-5.5.14-115.1 php5-tokenizer-debuginfo-5.5.14-115.1 php5-wddx-5.5.14-115.1 php5-wddx-debuginfo-5.5.14-115.1 php5-xmlreader-5.5.14-115.1 php5-xmlreader-debuginfo-5.5.14-115.1 php5-xmlrpc-5.5.14-115.1 php5-xmlrpc-debuginfo-5.5.14-115.1 php5-xmlwriter-5.5.14-115.1 php5-xmlwriter-debuginfo-5.5.14-115.1 php5-xsl-5.5.14-115.1 php5-xsl-debuginfo-5.5.14-115.1 php5-zip-5.5.14-115.1 php5-zip-debuginfo-5.5.14-115.1 php5-zlib-5.5.14-115.1 php5-zlib-debuginfo-5.5.14-115.1 - openSUSE Leap 42.3 (noarch): php5-pear-5.5.14-115.1 References: https://www.suse.com/security/cve/CVE-2018-20783.html https://www.suse.com/security/cve/CVE-2019-9020.html https://www.suse.com/security/cve/CVE-2019-9021.html https://www.suse.com/security/cve/CVE-2019-9023.html https://www.suse.com/security/cve/CVE-2019-9024.html https://www.suse.com/security/cve/CVE-2019-9641.html https://bugzilla.suse.com/1126711 https://bugzilla.suse.com/1126713 https://bugzilla.suse.com/1126821 https://bugzilla.suse.com/1126823 https://bugzilla.suse.com/1127122 https://bugzilla.suse.com/1128722 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1250-1: moderate: Security update for glibc
by opensuse-security＠opensuse.org 20 Apr '19

20 Apr '19

openSUSE Security Update: Security update for glibc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1250-1 Rating: moderate References: #1100396 #1122729 #1130045 Cross-References: CVE-2016-10739 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for glibc fixes the following issues: Security issue fixed: - CVE-2016-10739: Fixed an improper implementation of getaddrinfo function which could allow applications to incorrectly assume that had parsed a valid string, without the possibility of embedded HTTP headers or other potentially dangerous substrings (bsc#1122729). Other issue fixed: - Fixed an issue where pthread_mutex_trylock did not use a correct order of instructions while maintained the robust mutex list due to missing compiler barriers (bsc#1130045). - Added new Japanese Era name support (bsc#1100396). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1250=1 Package List: - openSUSE Leap 15.0 (i586 i686 x86_64): glibc-2.26-lp150.11.17.1 glibc-debuginfo-2.26-lp150.11.17.1 glibc-debugsource-2.26-lp150.11.17.1 glibc-devel-2.26-lp150.11.17.1 glibc-devel-debuginfo-2.26-lp150.11.17.1 glibc-devel-static-2.26-lp150.11.17.1 glibc-locale-2.26-lp150.11.17.1 glibc-locale-base-2.26-lp150.11.17.1 glibc-locale-base-debuginfo-2.26-lp150.11.17.1 glibc-profile-2.26-lp150.11.17.1 - openSUSE Leap 15.0 (i586 x86_64): glibc-extra-2.26-lp150.11.17.1 glibc-extra-debuginfo-2.26-lp150.11.17.1 glibc-utils-2.26-lp150.11.17.1 glibc-utils-debuginfo-2.26-lp150.11.17.1 glibc-utils-src-debugsource-2.26-lp150.11.17.1 nscd-2.26-lp150.11.17.1 nscd-debuginfo-2.26-lp150.11.17.1 - openSUSE Leap 15.0 (noarch): glibc-html-2.26-lp150.11.17.1 glibc-i18ndata-2.26-lp150.11.17.1 glibc-info-2.26-lp150.11.17.1 - openSUSE Leap 15.0 (x86_64): glibc-32bit-2.26-lp150.11.17.1 glibc-32bit-debuginfo-2.26-lp150.11.17.1 glibc-devel-32bit-2.26-lp150.11.17.1 glibc-devel-32bit-debuginfo-2.26-lp150.11.17.1 glibc-devel-static-32bit-2.26-lp150.11.17.1 glibc-locale-base-32bit-2.26-lp150.11.17.1 glibc-locale-base-32bit-debuginfo-2.26-lp150.11.17.1 glibc-profile-32bit-2.26-lp150.11.17.1 glibc-utils-32bit-2.26-lp150.11.17.1 glibc-utils-32bit-debuginfo-2.26-lp150.11.17.1 References: https://www.suse.com/security/cve/CVE-2016-10739.html https://bugzilla.suse.com/1100396 https://bugzilla.suse.com/1122729 https://bugzilla.suse.com/1130045 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1246-1: moderate: Security update for blueman
by opensuse-security＠opensuse.org 19 Apr '19

19 Apr '19

openSUSE Security Update: Security update for blueman ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1246-1 Rating: moderate References: #1083066 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for blueman fixes the following issues: The following security issue was addressed: - Fixed the polkit authorization checks in blueman, which previously allowed any user with access to the D-Bus system bus to trigger certain network configuration logic in blueman without authentication (boo#1083066). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1246=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): blueman-2.0.6-bp150.2.6.1 - openSUSE Backports SLE-15 (noarch): blueman-lang-2.0.6-bp150.2.6.1 thunar-sendto-blueman-2.0.6-bp150.2.6.1 References: https://bugzilla.suse.com/1083066 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1239-1: moderate: Security update for libqt5-qtbase
by opensuse-security＠opensuse.org 18 Apr '19

18 Apr '19

openSUSE Security Update: Security update for libqt5-qtbase ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1239-1 Rating: moderate References: #1108889 #1118597 #1129662 #1130246 Cross-References: CVE-2018-19870 CVE-2018-19872 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for libqt5-qtbase fixes the following issues: Security issues fixed: - CVE-2018-19872: Fixed an issue which could allow a division by zero leading to crash (bsc#1130246). - CVE-2018-19870: Fixed an improper check in QImage allocation which could allow Denial of Service when opening crafted gif files (bsc#1118597). Other issue addressed: - Fixed an issue which showing remote locations was not allowed (bsc#1129662). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1239=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libQt5Bootstrap-devel-static-5.9.4-lp150.11.1 libQt5Concurrent-devel-5.9.4-lp150.11.1 libQt5Concurrent5-5.9.4-lp150.11.1 libQt5Concurrent5-debuginfo-5.9.4-lp150.11.1 libQt5Core-devel-5.9.4-lp150.11.1 libQt5Core5-5.9.4-lp150.11.1 libQt5Core5-debuginfo-5.9.4-lp150.11.1 libQt5DBus-devel-5.9.4-lp150.11.1 libQt5DBus-devel-debuginfo-5.9.4-lp150.11.1 libQt5DBus5-5.9.4-lp150.11.1 libQt5DBus5-debuginfo-5.9.4-lp150.11.1 libQt5Gui-devel-5.9.4-lp150.11.1 libQt5Gui5-5.9.4-lp150.11.1 libQt5Gui5-debuginfo-5.9.4-lp150.11.1 libQt5KmsSupport-devel-static-5.9.4-lp150.11.1 libQt5Network-devel-5.9.4-lp150.11.1 libQt5Network5-5.9.4-lp150.11.1 libQt5Network5-debuginfo-5.9.4-lp150.11.1 libQt5OpenGL-devel-5.9.4-lp150.11.1 libQt5OpenGL5-5.9.4-lp150.11.1 libQt5OpenGL5-debuginfo-5.9.4-lp150.11.1 libQt5OpenGLExtensions-devel-static-5.9.4-lp150.11.1 libQt5PlatformHeaders-devel-5.9.4-lp150.11.1 libQt5PlatformSupport-devel-static-5.9.4-lp150.11.1 libQt5PrintSupport-devel-5.9.4-lp150.11.1 libQt5PrintSupport5-5.9.4-lp150.11.1 libQt5PrintSupport5-debuginfo-5.9.4-lp150.11.1 libQt5Sql-devel-5.9.4-lp150.11.1 libQt5Sql5-5.9.4-lp150.11.1 libQt5Sql5-debuginfo-5.9.4-lp150.11.1 libQt5Sql5-mysql-5.9.4-lp150.11.1 libQt5Sql5-mysql-debuginfo-5.9.4-lp150.11.1 libQt5Sql5-postgresql-5.9.4-lp150.11.1 libQt5Sql5-postgresql-debuginfo-5.9.4-lp150.11.1 libQt5Sql5-sqlite-5.9.4-lp150.11.1 libQt5Sql5-sqlite-debuginfo-5.9.4-lp150.11.1 libQt5Sql5-unixODBC-5.9.4-lp150.11.1 libQt5Sql5-unixODBC-debuginfo-5.9.4-lp150.11.1 libQt5Test-devel-5.9.4-lp150.11.1 libQt5Test5-5.9.4-lp150.11.1 libQt5Test5-debuginfo-5.9.4-lp150.11.1 libQt5Widgets-devel-5.9.4-lp150.11.1 libQt5Widgets5-5.9.4-lp150.11.1 libQt5Widgets5-debuginfo-5.9.4-lp150.11.1 libQt5Xml-devel-5.9.4-lp150.11.1 libQt5Xml5-5.9.4-lp150.11.1 libQt5Xml5-debuginfo-5.9.4-lp150.11.1 libqt5-qtbase-common-devel-5.9.4-lp150.11.1 libqt5-qtbase-common-devel-debuginfo-5.9.4-lp150.11.1 libqt5-qtbase-debugsource-5.9.4-lp150.11.1 libqt5-qtbase-devel-5.9.4-lp150.11.1 libqt5-qtbase-examples-5.9.4-lp150.11.1 libqt5-qtbase-examples-debuginfo-5.9.4-lp150.11.1 libqt5-qtbase-platformtheme-gtk3-5.9.4-lp150.11.1 libqt5-qtbase-platformtheme-gtk3-debuginfo-5.9.4-lp150.11.1 - openSUSE Leap 15.0 (noarch): libQt5Core-private-headers-devel-5.9.4-lp150.11.1 libQt5DBus-private-headers-devel-5.9.4-lp150.11.1 libQt5Gui-private-headers-devel-5.9.4-lp150.11.1 libQt5KmsSupport-private-headers-devel-5.9.4-lp150.11.1 libQt5Network-private-headers-devel-5.9.4-lp150.11.1 libQt5OpenGL-private-headers-devel-5.9.4-lp150.11.1 libQt5PlatformSupport-private-headers-devel-5.9.4-lp150.11.1 libQt5PrintSupport-private-headers-devel-5.9.4-lp150.11.1 libQt5Sql-private-headers-devel-5.9.4-lp150.11.1 libQt5Test-private-headers-devel-5.9.4-lp150.11.1 libQt5Widgets-private-headers-devel-5.9.4-lp150.11.1 libqt5-qtbase-private-headers-devel-5.9.4-lp150.11.1 - openSUSE Leap 15.0 (x86_64): libQt5Bootstrap-devel-static-32bit-5.9.4-lp150.11.1 libQt5Concurrent-devel-32bit-5.9.4-lp150.11.1 libQt5Concurrent5-32bit-5.9.4-lp150.11.1 libQt5Concurrent5-32bit-debuginfo-5.9.4-lp150.11.1 libQt5Core-devel-32bit-5.9.4-lp150.11.1 libQt5Core5-32bit-5.9.4-lp150.11.1 libQt5Core5-32bit-debuginfo-5.9.4-lp150.11.1 libQt5DBus-devel-32bit-5.9.4-lp150.11.1 libQt5DBus-devel-32bit-debuginfo-5.9.4-lp150.11.1 libQt5DBus5-32bit-5.9.4-lp150.11.1 libQt5DBus5-32bit-debuginfo-5.9.4-lp150.11.1 libQt5Gui-devel-32bit-5.9.4-lp150.11.1 libQt5Gui5-32bit-5.9.4-lp150.11.1 libQt5Gui5-32bit-debuginfo-5.9.4-lp150.11.1 libQt5Network-devel-32bit-5.9.4-lp150.11.1 libQt5Network5-32bit-5.9.4-lp150.11.1 libQt5Network5-32bit-debuginfo-5.9.4-lp150.11.1 libQt5OpenGL-devel-32bit-5.9.4-lp150.11.1 libQt5OpenGL5-32bit-5.9.4-lp150.11.1 libQt5OpenGL5-32bit-debuginfo-5.9.4-lp150.11.1 libQt5OpenGLExtensions-devel-static-32bit-5.9.4-lp150.11.1 libQt5PlatformSupport-devel-static-32bit-5.9.4-lp150.11.1 libQt5PrintSupport-devel-32bit-5.9.4-lp150.11.1 libQt5PrintSupport5-32bit-5.9.4-lp150.11.1 libQt5PrintSupport5-32bit-debuginfo-5.9.4-lp150.11.1 libQt5Sql-devel-32bit-5.9.4-lp150.11.1 libQt5Sql5-32bit-5.9.4-lp150.11.1 libQt5Sql5-32bit-debuginfo-5.9.4-lp150.11.1 libQt5Sql5-mysql-32bit-5.9.4-lp150.11.1 libQt5Sql5-mysql-32bit-debuginfo-5.9.4-lp150.11.1 libQt5Sql5-postgresql-32bit-5.9.4-lp150.11.1 libQt5Sql5-postgresql-32bit-debuginfo-5.9.4-lp150.11.1 libQt5Sql5-sqlite-32bit-5.9.4-lp150.11.1 libQt5Sql5-sqlite-32bit-debuginfo-5.9.4-lp150.11.1 libQt5Sql5-unixODBC-32bit-5.9.4-lp150.11.1 libQt5Sql5-unixODBC-32bit-debuginfo-5.9.4-lp150.11.1 libQt5Test-devel-32bit-5.9.4-lp150.11.1 libQt5Test5-32bit-5.9.4-lp150.11.1 libQt5Test5-32bit-debuginfo-5.9.4-lp150.11.1 libQt5Widgets-devel-32bit-5.9.4-lp150.11.1 libQt5Widgets5-32bit-5.9.4-lp150.11.1 libQt5Widgets5-32bit-debuginfo-5.9.4-lp150.11.1 libQt5Xml-devel-32bit-5.9.4-lp150.11.1 libQt5Xml5-32bit-5.9.4-lp150.11.1 libQt5Xml5-32bit-debuginfo-5.9.4-lp150.11.1 libqt5-qtbase-examples-32bit-5.9.4-lp150.11.1 libqt5-qtbase-examples-32bit-debuginfo-5.9.4-lp150.11.1 References: https://www.suse.com/security/cve/CVE-2018-19870.html https://www.suse.com/security/cve/CVE-2018-19872.html https://bugzilla.suse.com/1108889 https://bugzilla.suse.com/1118597 https://bugzilla.suse.com/1129662 https://bugzilla.suse.com/1130246 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1235-1: moderate: Security update for xmltooling
by opensuse-security＠opensuse.org 18 Apr '19

18 Apr '19

openSUSE Security Update: Security update for xmltooling ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1235-1 Rating: moderate References: #1129537 Cross-References: CVE-2019-9628 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for xmltooling fixes the following issues: Security issue fixed: - CVE-2019-9628: Fixed an improper handling of exception in XMLTooling library which could result in denial of service against the application using XMLTooling (bsc#1129537). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1235=1 Package List: - openSUSE Leap 15.0 (x86_64): libxmltooling-devel-1.6.4-lp150.2.3.1 libxmltooling7-1.6.4-lp150.2.3.1 libxmltooling7-debuginfo-1.6.4-lp150.2.3.1 xmltooling-debugsource-1.6.4-lp150.2.3.1 xmltooling-schemas-1.6.4-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-9628.html https://bugzilla.suse.com/1129537 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:1236-1: important: Security update for wget
by opensuse-security＠opensuse.org 18 Apr '19

18 Apr '19

openSUSE Security Update: Security update for wget ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1236-1 Rating: important References: #1131493 Cross-References: CVE-2019-5953 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for wget fixes the following issues: Security issue fixed: - CVE-2019-5953: Fixed a buffer overflow vulnerability which might cause code execution (bsc#1131493). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1236=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): wget-1.19.5-lp150.7.1 wget-debuginfo-1.19.5-lp150.7.1 wget-debugsource-1.19.5-lp150.7.1 References: https://www.suse.com/security/cve/CVE-2019-5953.html https://bugzilla.suse.com/1131493 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0