October 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2017:2884-1: important: Security update for wget
by opensuse-security＠opensuse.org 27 Oct '17

27 Oct '17

openSUSE Security Update: Security update for wget ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2884-1 Rating: important References: #1064715 #1064716 Cross-References: CVE-2017-13089 CVE-2017-13090 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for wget fixes the following security issues: - CVE-2017-13089,CVE-2017-13090: Missing checks for negative remaining_chunk_size in skip_short_body and fd_read_body could cause stack buffer overflows, which could have been exploited by malicious servers. (bsc#1064715,bsc#1064716) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1210=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1210=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): wget-1.14-12.1 wget-debuginfo-1.14-12.1 wget-debugsource-1.14-12.1 - openSUSE Leap 42.2 (i586 x86_64): wget-1.14-8.6.1 wget-debuginfo-1.14-8.6.1 wget-debugsource-1.14-8.6.1 References: https://www.suse.com/security/cve/CVE-2017-13089.html https://www.suse.com/security/cve/CVE-2017-13090.html https://bugzilla.suse.com/1064715 https://bugzilla.suse.com/1064716

1 0

openSUSE-RU-2017:2883-1: moderate: Recommended update for gdb
by maintenance＠opensuse.org 27 Oct '17

27 Oct '17

openSUSE Recommended Update: Recommended update for gdb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2883-1 Rating: moderate References: #1056437 #1062315 #1062316 #1062318 #985550 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: The GNU Debugger GDB was updated to the 8.0.1 release, bringing lots of features and bugfixes. - Link gdb against a bundled libipt (processor trace library) on x86_64 and i686 for improved tracing support on Intel CPUs. [bsc#985550] - Rebase to 8.0.1 release (fixing PR21886, PR22046) - Updated libstdc++ pretty printers to gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 . - Add support for zSeries z14 specific features [fate#321514, bsc#1062315, fate#322272, bsc#1062318] - Disable guile extensions for new distros, the gdb support is incompatible with guile 2.2. - Rebase to gdb 8.0 release: [fate#319573] * support for DWARF5 (except its .debug_names) * support C++11 rvalue references * support PKU register (memory protection keys on future Intel CPUs) * python scripting: - start, stop and access running btrace - rvalue references in gdb.Type * record/replay x86_64 rdrand and rdseed * removed support for GCJ compiled java programs * user commands accept more than 10 arguments * "eval" expands user-defined command arguments * new options: set/show disassembler-options (on arm, ppc s390) - Update to gdb 7.12.1 * negative repeat count for x examines backwards * fortran: support structs/arrays with dynamically types fields * support MPX bound checking * support for the Rust language * 'catch syscall' now can catch groups of related syscalls * New (sub)commands: - skip {-file,-gfile,-function,-rfunction}: generic skip mechanism - maint {selftest,info line-table} - new-ui: create new user interface for GUI clients * (fast) tracepoints on s390x and ppc64le added to gdbserver * New target Andes NDS32 This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1212=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gdb-8.0.1-18.3.1 gdb-debuginfo-8.0.1-18.3.1 gdb-debugsource-8.0.1-18.3.1 gdb-testresults-8.0.1-18.3.1 gdbserver-8.0.1-18.3.1 gdbserver-debuginfo-8.0.1-18.3.1 References: https://bugzilla.suse.com/1056437 https://bugzilla.suse.com/1062315 https://bugzilla.suse.com/1062316 https://bugzilla.suse.com/1062318 https://bugzilla.suse.com/985550

1 0

openSUSE-RU-2017:2882-1: moderate: Recommended update for pam
by maintenance＠opensuse.org 27 Oct '17

27 Oct '17

openSUSE Recommended Update: Recommended update for pam ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2882-1 Rating: moderate References: #1012494 #1013706 #1041099 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for pam fixes the following issue: The default PAM nproc limits for non-privileged users would cause Chromium tabs to exhaust limits during regular to intensive usage. This update increases the default nproc limit for non-privileged users to 4069 (soft) / 16384 (hard). (boo#1012494, boo#1013706, boo#1041099) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1198=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1198=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): pam-1.3.0-6.1 pam-debuginfo-1.3.0-6.1 pam-debugsource-1.3.0-6.1 pam-devel-1.3.0-6.1 - openSUSE Leap 42.3 (x86_64): pam-32bit-1.3.0-6.1 pam-debuginfo-32bit-1.3.0-6.1 pam-devel-32bit-1.3.0-6.1 - openSUSE Leap 42.3 (noarch): pam-doc-1.3.0-6.1 - openSUSE Leap 42.2 (i586 x86_64): pam-1.3.0-2.5.1 pam-debuginfo-1.3.0-2.5.1 pam-debugsource-1.3.0-2.5.1 pam-devel-1.3.0-2.5.1 - openSUSE Leap 42.2 (x86_64): pam-32bit-1.3.0-2.5.1 pam-debuginfo-32bit-1.3.0-2.5.1 pam-devel-32bit-1.3.0-2.5.1 - openSUSE Leap 42.2 (noarch): pam-doc-1.3.0-2.5.1 References: https://bugzilla.suse.com/1012494 https://bugzilla.suse.com/1013706 https://bugzilla.suse.com/1041099

1 0

openSUSE-RU-2017:2881-1: moderate: Recommended update for opera
by maintenance＠opensuse.org 27 Oct '17

27 Oct '17

openSUSE Recommended Update: Recommended update for opera ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2881-1 Rating: moderate References: #1065500 Affected Products: openSUSE Leap 42.3:NonFree openSUSE Leap 42.2:NonFree ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for Opera to version 48.0.2685.52 contains the following fixes: - Allow Ctrl+C when capturing the screen to copy what is marked - Take a snapshot from the surface for PDF viewer snaps Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3:NonFree: zypper in -t patch openSUSE-2017-1197=1 - openSUSE Leap 42.2:NonFree: zypper in -t patch openSUSE-2017-1197=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3:NonFree (x86_64): opera-48.0.2685.52-56.1 - openSUSE Leap 42.2:NonFree (x86_64): opera-48.0.2685.52-61.1 References: https://bugzilla.suse.com/1065500

1 0

openSUSE-SU-2017:2880-1: moderate: Security update for curl
by opensuse-security＠opensuse.org 27 Oct '17

27 Oct '17

openSUSE Security Update: Security update for curl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2880-1 Rating: moderate References: #1060653 #1061876 #1063824 Cross-References: CVE-2017-1000254 CVE-2017-1000257 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for curl fixes the following issues: Security issues fixed: - CVE-2017-1000254: FTP PWD response parser out of bounds read (bsc#1061876) - CVE-2017-1000257: IMAP FETCH response out of bounds read (bsc#1063824) Bugs fixed: - Fixed error "error:1408F10B:SSL routines" when connecting to ftps via proxy (bsc#1060653) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1200=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1200=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): curl-7.37.0-23.1 curl-debuginfo-7.37.0-23.1 curl-debugsource-7.37.0-23.1 libcurl-devel-7.37.0-23.1 libcurl4-7.37.0-23.1 libcurl4-debuginfo-7.37.0-23.1 - openSUSE Leap 42.3 (x86_64): libcurl-devel-32bit-7.37.0-23.1 libcurl4-32bit-7.37.0-23.1 libcurl4-debuginfo-32bit-7.37.0-23.1 - openSUSE Leap 42.2 (i586 x86_64): curl-7.37.0-16.9.1 curl-debuginfo-7.37.0-16.9.1 curl-debugsource-7.37.0-16.9.1 libcurl-devel-7.37.0-16.9.1 libcurl4-7.37.0-16.9.1 libcurl4-debuginfo-7.37.0-16.9.1 - openSUSE Leap 42.2 (x86_64): libcurl-devel-32bit-7.37.0-16.9.1 libcurl4-32bit-7.37.0-16.9.1 libcurl4-debuginfo-32bit-7.37.0-16.9.1 References: https://www.suse.com/security/cve/CVE-2017-1000254.html https://www.suse.com/security/cve/CVE-2017-1000257.html https://bugzilla.suse.com/1060653 https://bugzilla.suse.com/1061876 https://bugzilla.suse.com/1063824

1 0

openSUSE-RU-2017:2879-1: Recommended update for corosync
by maintenance＠opensuse.org 27 Oct '17

27 Oct '17

openSUSE Recommended Update: Recommended update for corosync ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2879-1 Rating: low References: #1032634 #1047862 #1060767 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for corosync fixes the following issues: - Don't terminate with assertion error after a network interface goes down. (bsc#1032634) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1204=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): corosync-2.3.6-7.1 corosync-debuginfo-2.3.6-7.1 corosync-debugsource-2.3.6-7.1 corosync-testagents-2.3.6-7.1 corosync-testagents-debuginfo-2.3.6-7.1 libcorosync-devel-2.3.6-7.1 libcorosync4-2.3.6-7.1 libcorosync4-debuginfo-2.3.6-7.1 - openSUSE Leap 42.3 (x86_64): libcorosync4-32bit-2.3.6-7.1 libcorosync4-debuginfo-32bit-2.3.6-7.1 References: https://bugzilla.suse.com/1032634 https://bugzilla.suse.com/1047862 https://bugzilla.suse.com/1060767

1 0

openSUSE-SU-2017:2878-1: moderate: Security update for libvirt
by opensuse-security＠opensuse.org 27 Oct '17

27 Oct '17

openSUSE Security Update: Security update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2878-1 Rating: moderate References: #1062563 #1062620 Cross-References: CVE-2017-1000256 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for libvirt fixes the following issues: Security issue fixed: - CVE-2017-1000256: Ensure TLS clients always verify the server certificate in the serial/TLS support. (bsc#1062563) Non security issue fixed: - libvirt-daemon-qemu requires libvirt-daemon-driver-storage (bsc#1062620) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1213=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libvirt-3.3.0-9.1 libvirt-admin-3.3.0-9.1 libvirt-admin-debuginfo-3.3.0-9.1 libvirt-client-3.3.0-9.1 libvirt-client-debuginfo-3.3.0-9.1 libvirt-daemon-3.3.0-9.1 libvirt-daemon-config-network-3.3.0-9.1 libvirt-daemon-config-nwfilter-3.3.0-9.1 libvirt-daemon-debuginfo-3.3.0-9.1 libvirt-daemon-driver-interface-3.3.0-9.1 libvirt-daemon-driver-interface-debuginfo-3.3.0-9.1 libvirt-daemon-driver-lxc-3.3.0-9.1 libvirt-daemon-driver-lxc-debuginfo-3.3.0-9.1 libvirt-daemon-driver-network-3.3.0-9.1 libvirt-daemon-driver-network-debuginfo-3.3.0-9.1 libvirt-daemon-driver-nodedev-3.3.0-9.1 libvirt-daemon-driver-nodedev-debuginfo-3.3.0-9.1 libvirt-daemon-driver-nwfilter-3.3.0-9.1 libvirt-daemon-driver-nwfilter-debuginfo-3.3.0-9.1 libvirt-daemon-driver-qemu-3.3.0-9.1 libvirt-daemon-driver-qemu-debuginfo-3.3.0-9.1 libvirt-daemon-driver-secret-3.3.0-9.1 libvirt-daemon-driver-secret-debuginfo-3.3.0-9.1 libvirt-daemon-driver-storage-3.3.0-9.1 libvirt-daemon-driver-storage-core-3.3.0-9.1 libvirt-daemon-driver-storage-core-debuginfo-3.3.0-9.1 libvirt-daemon-driver-storage-disk-3.3.0-9.1 libvirt-daemon-driver-storage-disk-debuginfo-3.3.0-9.1 libvirt-daemon-driver-storage-iscsi-3.3.0-9.1 libvirt-daemon-driver-storage-iscsi-debuginfo-3.3.0-9.1 libvirt-daemon-driver-storage-logical-3.3.0-9.1 libvirt-daemon-driver-storage-logical-debuginfo-3.3.0-9.1 libvirt-daemon-driver-storage-mpath-3.3.0-9.1 libvirt-daemon-driver-storage-mpath-debuginfo-3.3.0-9.1 libvirt-daemon-driver-storage-scsi-3.3.0-9.1 libvirt-daemon-driver-storage-scsi-debuginfo-3.3.0-9.1 libvirt-daemon-driver-uml-3.3.0-9.1 libvirt-daemon-driver-uml-debuginfo-3.3.0-9.1 libvirt-daemon-driver-vbox-3.3.0-9.1 libvirt-daemon-driver-vbox-debuginfo-3.3.0-9.1 libvirt-daemon-lxc-3.3.0-9.1 libvirt-daemon-qemu-3.3.0-9.1 libvirt-daemon-uml-3.3.0-9.1 libvirt-daemon-vbox-3.3.0-9.1 libvirt-debugsource-3.3.0-9.1 libvirt-devel-3.3.0-9.1 libvirt-doc-3.3.0-9.1 libvirt-libs-3.3.0-9.1 libvirt-libs-debuginfo-3.3.0-9.1 libvirt-lock-sanlock-3.3.0-9.1 libvirt-lock-sanlock-debuginfo-3.3.0-9.1 libvirt-nss-3.3.0-9.1 libvirt-nss-debuginfo-3.3.0-9.1 - openSUSE Leap 42.3 (x86_64): libvirt-client-debuginfo-32bit-3.3.0-9.1 libvirt-daemon-driver-libxl-3.3.0-9.1 libvirt-daemon-driver-libxl-debuginfo-3.3.0-9.1 libvirt-daemon-driver-storage-rbd-3.3.0-9.1 libvirt-daemon-driver-storage-rbd-debuginfo-3.3.0-9.1 libvirt-daemon-xen-3.3.0-9.1 libvirt-devel-32bit-3.3.0-9.1 References: https://www.suse.com/security/cve/CVE-2017-1000256.html https://bugzilla.suse.com/1062563 https://bugzilla.suse.com/1062620

1 0

openSUSE-RU-2017:2877-1: moderate: Recommended update for corosync
by maintenance＠opensuse.org 27 Oct '17

27 Oct '17

openSUSE Recommended Update: Recommended update for corosync ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2877-1 Rating: moderate References: #1023959 #1030437 #1032634 #1037226 #1043045 #1047862 #1047876 #1051638 #1060767 #996230 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 10 recommended fixes can now be installed. Description: This update for corosync provides the following fixes: - Don't terminate with assertion error after a network interface goes down. (bsc#1032634) - Don't fail to start when /etc/hosts contains IPv6 addresses. (bsc#1051638) - Ensure corosync processes are memory locked. (bsc#1037226) - Prefer nodelist over bindnetaddr when both are available. (bsc#1030437) - Set initial logging priority to a lower value to allow log filters configured in corosync.conf to be applied. (bsc#1023959) - Fix a failure when starting Corosync Cluster engine. (bsc#996230) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1203=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): corosync-2.3.5-8.3.1 corosync-debuginfo-2.3.5-8.3.1 corosync-debugsource-2.3.5-8.3.1 corosync-testagents-2.3.5-8.3.1 corosync-testagents-debuginfo-2.3.5-8.3.1 libcorosync-devel-2.3.5-8.3.1 libcorosync4-2.3.5-8.3.1 libcorosync4-debuginfo-2.3.5-8.3.1 - openSUSE Leap 42.2 (x86_64): libcorosync4-32bit-2.3.5-8.3.1 libcorosync4-debuginfo-32bit-2.3.5-8.3.1 References: https://bugzilla.suse.com/1023959 https://bugzilla.suse.com/1030437 https://bugzilla.suse.com/1032634 https://bugzilla.suse.com/1037226 https://bugzilla.suse.com/1043045 https://bugzilla.suse.com/1047862 https://bugzilla.suse.com/1047876 https://bugzilla.suse.com/1051638 https://bugzilla.suse.com/1060767 https://bugzilla.suse.com/996230

1 0

openSUSE-RU-2017:2876-1: Recommended update for logrotate
by maintenance＠opensuse.org 27 Oct '17

27 Oct '17

openSUSE Recommended Update: Recommended update for logrotate ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2876-1 Rating: low References: #1028353 #1057801 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for logrotate provides the following fixes: - Fixed an error while renaming to already existing files that was causing logs to stop rotating. (bsc#1028353) - Make sure log files continue to rotate properly when a stale status file is found. (bsc#1057801) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1206=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): logrotate-3.8.7-9.3.1 logrotate-debuginfo-3.8.7-9.3.1 logrotate-debugsource-3.8.7-9.3.1 References: https://bugzilla.suse.com/1028353 https://bugzilla.suse.com/1057801

1 0

openSUSE-SU-2017:2875-1: moderate: Security update for tcpdump
by opensuse-security＠opensuse.org 27 Oct '17

27 Oct '17

openSUSE Security Update: Security update for tcpdump ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2875-1 Rating: moderate References: #1047873 #1057247 Cross-References: CVE-2017-11108 CVE-2017-11541 CVE-2017-11542 CVE-2017-11543 CVE-2017-12893 CVE-2017-12894 CVE-2017-12895 CVE-2017-12896 CVE-2017-12897 CVE-2017-12898 CVE-2017-12899 CVE-2017-12900 CVE-2017-12901 CVE-2017-12902 CVE-2017-12985 CVE-2017-12986 CVE-2017-12987 CVE-2017-12988 CVE-2017-12989 CVE-2017-12990 CVE-2017-12991 CVE-2017-12992 CVE-2017-12993 CVE-2017-12994 CVE-2017-12995 CVE-2017-12996 CVE-2017-12997 CVE-2017-12998 CVE-2017-12999 CVE-2017-13000 CVE-2017-13001 CVE-2017-13002 CVE-2017-13003 CVE-2017-13004 CVE-2017-13005 CVE-2017-13006 CVE-2017-13007 CVE-2017-13008 CVE-2017-13009 CVE-2017-13010 CVE-2017-13011 CVE-2017-13012 CVE-2017-13013 CVE-2017-13014 CVE-2017-13015 CVE-2017-13016 CVE-2017-13017 CVE-2017-13018 CVE-2017-13019 CVE-2017-13020 CVE-2017-13021 CVE-2017-13022 CVE-2017-13023 CVE-2017-13024 CVE-2017-13025 CVE-2017-13026 CVE-2017-13027 CVE-2017-13028 CVE-2017-13029 CVE-2017-13030 CVE-2017-13031 CVE-2017-13032 CVE-2017-13033 CVE-2017-13034 CVE-2017-13035 CVE-2017-13036 CVE-2017-13037 CVE-2017-13038 CVE-2017-13039 CVE-2017-13040 CVE-2017-13041 CVE-2017-13042 CVE-2017-13043 CVE-2017-13044 CVE-2017-13045 CVE-2017-13046 CVE-2017-13047 CVE-2017-13048 CVE-2017-13049 CVE-2017-13050 CVE-2017-13051 CVE-2017-13052 CVE-2017-13053 CVE-2017-13054 CVE-2017-13055 CVE-2017-13687 CVE-2017-13688 CVE-2017-13689 CVE-2017-13690 CVE-2017-13725 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 90 vulnerabilities is now available. Description: This update for tcpdump to version 4.9.2 fixes several issues. These security issues were fixed: - CVE-2017-11108: Prevent remote attackers to cause DoS (heap-based buffer over-read and application crash) via crafted packet data. The crash occured in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol (bsc#1047873, bsc#1057247). - CVE-2017-11543: Prevent buffer overflow in the sliplink_print function in print-sl.c that allowed remote DoS (bsc#1057247). - CVE-2017-13011: Prevent buffer overflow in bittok2str_internal() that allowed remote DoS (bsc#1057247) - CVE-2017-12989: Prevent infinite loop in the RESP parser that allowed remote DoS (bsc#1057247) - CVE-2017-12990: Prevent infinite loop in the ISAKMP parser that allowed remote DoS (bsc#1057247) - CVE-2017-12995: Prevent infinite loop in the DNS parser that allowed remote DoS (bsc#1057247) - CVE-2017-12997: Prevent infinite loop in the LLDP parser that allowed remote DoS (bsc#1057247) - CVE-2017-11541: Prevent heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c that allowed remote DoS (bsc#1057247). - CVE-2017-11542: Prevent heap-based buffer over-read in the pimv1_print function in print-pim.c that allowed remote DoS (bsc#1057247). - CVE-2017-12893: Prevent buffer over-read in the SMB/CIFS parser that allowed remote DoS (bsc#1057247) - CVE-2017-12894: Prevent buffer over-read in several protocol parsers that allowed remote DoS (bsc#1057247) - CVE-2017-12895: Prevent buffer over-read in the ICMP parser that allowed remote DoS (bsc#1057247) - CVE-2017-12896: Prevent buffer over-read in the ISAKMP parser that allowed remote DoS (bsc#1057247) - CVE-2017-12897: Prevent buffer over-read in the ISO CLNS parser that allowed remote DoS (bsc#1057247) - CVE-2017-12898: Prevent buffer over-read in the NFS parser that allowed remote DoS (bsc#1057247) - CVE-2017-12899: Prevent buffer over-read in the DECnet parser that allowed remote DoS (bsc#1057247) - CVE-2017-12900: Prevent buffer over-read in the in several protocol parsers that allowed remote DoS (bsc#1057247) - CVE-2017-12901: Prevent buffer over-read in the EIGRP parser that allowed remote DoS (bsc#1057247) - CVE-2017-12902: Prevent buffer over-read in the Zephyr parser that allowed remote DoS (bsc#1057247) - CVE-2017-12985: Prevent buffer over-read in the IPv6 parser that allowed remote DoS (bsc#1057247) - CVE-2017-12986: Prevent buffer over-read in the IPv6 routing header parser that allowed remote DoS (bsc#1057247) - CVE-2017-12987: Prevent buffer over-read in the 802.11 parser that allowed remote DoS (bsc#1057247) - CVE-2017-12988: Prevent buffer over-read in the telnet parser that allowed remote DoS (bsc#1057247) - CVE-2017-12991: Prevent buffer over-read in the BGP parser that allowed remote DoS (bsc#1057247) - CVE-2017-12992: Prevent buffer over-read in the RIPng parser that allowed remote DoS (bsc#1057247) - CVE-2017-12993: Prevent buffer over-read in the Juniper protocols parser that allowed remote DoS (bsc#1057247) - CVE-2017-12994: Prevent buffer over-read in the BGP parser that allowed remote DoS (bsc#1057247) - CVE-2017-12996: Prevent buffer over-read in the PIMv2 parser that allowed remote DoS (bsc#1057247) - CVE-2017-12998: Prevent buffer over-read in the IS-IS parser that allowed remote DoS (bsc#1057247) - CVE-2017-12999: Prevent buffer over-read in the IS-IS parser that allowed remote DoS (bsc#1057247) - CVE-2017-13000: Prevent buffer over-read in the IEEE 802.15.4 parser that allowed remote DoS (bsc#1057247) - CVE-2017-13001: Prevent buffer over-read in the NFS parser that allowed remote DoS (bsc#1057247) - CVE-2017-13002: Prevent buffer over-read in the AODV parser that allowed remote DoS (bsc#1057247) - CVE-2017-13003: Prevent buffer over-read in the LMP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13004: Prevent buffer over-read in the Juniper protocols parser that allowed remote DoS (bsc#1057247) - CVE-2017-13005: Prevent buffer over-read in the NFS parser that allowed remote DoS (bsc#1057247) - CVE-2017-13006: Prevent buffer over-read in the L2TP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13007: Prevent buffer over-read in the Apple PKTAP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13008: Prevent buffer over-read in the IEEE 802.11 parser that allowed remote DoS (bsc#1057247) - CVE-2017-13009: Prevent buffer over-read in the IPv6 mobility parser that allowed remote DoS (bsc#1057247) - CVE-2017-13010: Prevent buffer over-read in the BEEP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13012: Prevent buffer over-read in the ICMP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13013: Prevent buffer over-read in the ARP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13014: Prevent buffer over-read in the White Board protocol parser that allowed remote DoS (bsc#1057247) - CVE-2017-13015: Prevent buffer over-read in the EAP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13016: Prevent buffer over-read in the ISO ES-IS parser that allowed remote DoS (bsc#1057247) - CVE-2017-13017: Prevent buffer over-read in the DHCPv6 parser that allowed remote DoS (bsc#1057247) - CVE-2017-13018: Prevent buffer over-read in the PGM parser that allowed remote DoS (bsc#1057247) - CVE-2017-13019: Prevent buffer over-read in the PGM parser that allowed remote DoS (bsc#1057247) - CVE-2017-13020: Prevent buffer over-read in the VTP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13021: Prevent buffer over-read in the ICMPv6 parser that allowed remote DoS (bsc#1057247) - CVE-2017-13022: Prevent buffer over-read in the IP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13023: Prevent buffer over-read in the IPv6 mobility parser that allowed remote DoS (bsc#1057247) - CVE-2017-13024: Prevent buffer over-read in the IPv6 mobility parser that allowed remote DoS (bsc#1057247) - CVE-2017-13025: Prevent buffer over-read in the IPv6 mobility parser that allowed remote DoS (bsc#1057247) - CVE-2017-13026: Prevent buffer over-read in the ISO IS-IS parser that allowed remote DoS (bsc#1057247) - CVE-2017-13027: Prevent buffer over-read in the LLDP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13028: Prevent buffer over-read in the BOOTP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13029: Prevent buffer over-read in the PPP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13030: Prevent buffer over-read in the PIM parser that allowed remote DoS (bsc#1057247) - CVE-2017-13031: Prevent buffer over-read in the IPv6 fragmentation header parser that allowed remote DoS (bsc#1057247) - CVE-2017-13032: Prevent buffer over-read in the RADIUS parser that allowed remote DoS (bsc#1057247) - CVE-2017-13033: Prevent buffer over-read in the VTP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13034: Prevent buffer over-read in the PGM parser that allowed remote DoS (bsc#1057247) - CVE-2017-13035: Prevent buffer over-read in the ISO IS-IS parser that allowed remote DoS (bsc#1057247) - CVE-2017-13036: Prevent buffer over-read in the OSPFv3 parser that allowed remote DoS (bsc#1057247) - CVE-2017-13037: Prevent buffer over-read in the IP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13038: Prevent buffer over-read in the PPP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13039: Prevent buffer over-read in the ISAKMP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13040: Prevent buffer over-read in the MPTCP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13041: Prevent buffer over-read in the ICMPv6 parser that allowed remote DoS (bsc#1057247) - CVE-2017-13042: Prevent buffer over-read in the HNCP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13043: Prevent buffer over-read in the BGP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13044: Prevent buffer over-read in the HNCP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13045: Prevent buffer over-read in the VQP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13046: Prevent buffer over-read in the BGP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13047: Prevent buffer over-read in the ISO ES-IS parser that allowed remote DoS (bsc#1057247) - CVE-2017-13048: Prevent buffer over-read in the RSVP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13049: Prevent buffer over-read in the Rx protocol parser that allowed remote DoS (bsc#1057247) - CVE-2017-13050: Prevent buffer over-read in the RPKI-Router parser that allowed remote DoS (bsc#1057247) - CVE-2017-13051: Prevent buffer over-read in the RSVP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13052: Prevent buffer over-read in the CFM parser that allowed remote DoS (bsc#1057247) - CVE-2017-13053: Prevent buffer over-read in the BGP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13054: Prevent buffer over-read in the LLDP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13055: Prevent buffer over-read in the ISO IS-IS parser that allowed remote DoS (bsc#1057247) - CVE-2017-13687: Prevent buffer over-read in the Cisco HDLC parser that allowed remote DoS (bsc#1057247) - CVE-2017-13688: Prevent buffer over-read in the OLSR parser that allowed remote DoS (bsc#1057247) - CVE-2017-13689: Prevent buffer over-read in the IKEv1 parser that allowed remote DoS (bsc#1057247) - CVE-2017-13690: Prevent buffer over-read in the IKEv2 parser that allowed remote DoS (bsc#1057247) - CVE-2017-13725: Prevent buffer over-read in the IPv6 routing header parser that allowed remote DoS (bsc#1057247) - Prevent segmentation fault in ESP decoder with OpenSSL 1.1 (bsc#1057247) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1205=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1205=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): tcpdump-4.9.2-9.1 tcpdump-debuginfo-4.9.2-9.1 tcpdump-debugsource-4.9.2-9.1 - openSUSE Leap 42.2 (x86_64): tcpdump-4.9.2-6.6.1 tcpdump-debuginfo-4.9.2-6.6.1 tcpdump-debugsource-4.9.2-6.6.1 References: https://www.suse.com/security/cve/CVE-2017-11108.html https://www.suse.com/security/cve/CVE-2017-11541.html https://www.suse.com/security/cve/CVE-2017-11542.html https://www.suse.com/security/cve/CVE-2017-11543.html https://www.suse.com/security/cve/CVE-2017-12893.html https://www.suse.com/security/cve/CVE-2017-12894.html https://www.suse.com/security/cve/CVE-2017-12895.html https://www.suse.com/security/cve/CVE-2017-12896.html https://www.suse.com/security/cve/CVE-2017-12897.html https://www.suse.com/security/cve/CVE-2017-12898.html https://www.suse.com/security/cve/CVE-2017-12899.html https://www.suse.com/security/cve/CVE-2017-12900.html https://www.suse.com/security/cve/CVE-2017-12901.html https://www.suse.com/security/cve/CVE-2017-12902.html https://www.suse.com/security/cve/CVE-2017-12985.html https://www.suse.com/security/cve/CVE-2017-12986.html https://www.suse.com/security/cve/CVE-2017-12987.html https://www.suse.com/security/cve/CVE-2017-12988.html https://www.suse.com/security/cve/CVE-2017-12989.html https://www.suse.com/security/cve/CVE-2017-12990.html https://www.suse.com/security/cve/CVE-2017-12991.html https://www.suse.com/security/cve/CVE-2017-12992.html https://www.suse.com/security/cve/CVE-2017-12993.html https://www.suse.com/security/cve/CVE-2017-12994.html https://www.suse.com/security/cve/CVE-2017-12995.html https://www.suse.com/security/cve/CVE-2017-12996.html https://www.suse.com/security/cve/CVE-2017-12997.html https://www.suse.com/security/cve/CVE-2017-12998.html https://www.suse.com/security/cve/CVE-2017-12999.html https://www.suse.com/security/cve/CVE-2017-13000.html https://www.suse.com/security/cve/CVE-2017-13001.html https://www.suse.com/security/cve/CVE-2017-13002.html https://www.suse.com/security/cve/CVE-2017-13003.html https://www.suse.com/security/cve/CVE-2017-13004.html https://www.suse.com/security/cve/CVE-2017-13005.html https://www.suse.com/security/cve/CVE-2017-13006.html https://www.suse.com/security/cve/CVE-2017-13007.html https://www.suse.com/security/cve/CVE-2017-13008.html https://www.suse.com/security/cve/CVE-2017-13009.html https://www.suse.com/security/cve/CVE-2017-13010.html https://www.suse.com/security/cve/CVE-2017-13011.html https://www.suse.com/security/cve/CVE-2017-13012.html https://www.suse.com/security/cve/CVE-2017-13013.html https://www.suse.com/security/cve/CVE-2017-13014.html https://www.suse.com/security/cve/CVE-2017-13015.html https://www.suse.com/security/cve/CVE-2017-13016.html https://www.suse.com/security/cve/CVE-2017-13017.html https://www.suse.com/security/cve/CVE-2017-13018.html https://www.suse.com/security/cve/CVE-2017-13019.html https://www.suse.com/security/cve/CVE-2017-13020.html https://www.suse.com/security/cve/CVE-2017-13021.html https://www.suse.com/security/cve/CVE-2017-13022.html https://www.suse.com/security/cve/CVE-2017-13023.html https://www.suse.com/security/cve/CVE-2017-13024.html https://www.suse.com/security/cve/CVE-2017-13025.html https://www.suse.com/security/cve/CVE-2017-13026.html https://www.suse.com/security/cve/CVE-2017-13027.html https://www.suse.com/security/cve/CVE-2017-13028.html https://www.suse.com/security/cve/CVE-2017-13029.html https://www.suse.com/security/cve/CVE-2017-13030.html https://www.suse.com/security/cve/CVE-2017-13031.html https://www.suse.com/security/cve/CVE-2017-13032.html https://www.suse.com/security/cve/CVE-2017-13033.html https://www.suse.com/security/cve/CVE-2017-13034.html https://www.suse.com/security/cve/CVE-2017-13035.html https://www.suse.com/security/cve/CVE-2017-13036.html https://www.suse.com/security/cve/CVE-2017-13037.html https://www.suse.com/security/cve/CVE-2017-13038.html https://www.suse.com/security/cve/CVE-2017-13039.html https://www.suse.com/security/cve/CVE-2017-13040.html https://www.suse.com/security/cve/CVE-2017-13041.html https://www.suse.com/security/cve/CVE-2017-13042.html https://www.suse.com/security/cve/CVE-2017-13043.html https://www.suse.com/security/cve/CVE-2017-13044.html https://www.suse.com/security/cve/CVE-2017-13045.html https://www.suse.com/security/cve/CVE-2017-13046.html https://www.suse.com/security/cve/CVE-2017-13047.html https://www.suse.com/security/cve/CVE-2017-13048.html https://www.suse.com/security/cve/CVE-2017-13049.html https://www.suse.com/security/cve/CVE-2017-13050.html https://www.suse.com/security/cve/CVE-2017-13051.html https://www.suse.com/security/cve/CVE-2017-13052.html https://www.suse.com/security/cve/CVE-2017-13053.html https://www.suse.com/security/cve/CVE-2017-13054.html https://www.suse.com/security/cve/CVE-2017-13055.html https://www.suse.com/security/cve/CVE-2017-13687.html https://www.suse.com/security/cve/CVE-2017-13688.html https://www.suse.com/security/cve/CVE-2017-13689.html https://www.suse.com/security/cve/CVE-2017-13690.html https://www.suse.com/security/cve/CVE-2017-13725.html https://bugzilla.suse.com/1047873 https://bugzilla.suse.com/1057247

1 0