December 2018

openSUSE-SU-2018:4151-1: moderate: Security update for pdns-recursor
by opensuse-security＠opensuse.org 17 Dec '18

17 Dec '18

openSUSE Security Update: Security update for pdns-recursor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4151-1 Rating: moderate References: #1114157 #1114169 #1114170 Cross-References: CVE-2018-10851 CVE-2018-14626 CVE-2018-14644 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update … [View More]

1 0

openSUSE-SU-2018:4148-1: moderate: Security update for openvswitch
by opensuse-security＠opensuse.org 15 Dec '18

15 Dec '18

openSUSE Security Update: Security update for openvswitch ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4148-1 Rating: moderate References: #1104467 Cross-References: CVE-2018-17204 CVE-2018-17205 CVE-2018-17206 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes three … [View More]vulnerabilities is now available. Description: This update for openvswitch to version 2.7.6 fixes the following issues: These security issues were fixed: - CVE-2018-17205: Prevent OVS crash when reverting old flows in bundle commit (bsc#1104467). - CVE-2018-17206: Avoid buffer overread in BUNDLE action decoding (bsc#1104467). - CVE-2018-17204:When decoding a group mod, it validated the group type and command after the whole group mod has been decoded. The OF1.5 decoder, however, tried to use the type and command earlier, when it might still be invalid. This caused an assertion failure (via OVS_NOT_REACHED) (bsc#1104467). These non-security issues were fixed: - ofproto/bond: Fix bond reconfiguration race condition. - ofproto/bond: Fix bond post recirc rule leak. - ofproto/bond: fix interal flow leak of tcp-balance bond - systemd: Restart openvswitch service if a daemon crashes - conntrack: Fix checks for TCP, UDP, and IPv6 header sizes. - ofp-actions: Fix translation of set_field for nw_ecn - netdev-dpdk: Fix mempool segfault. - ofproto-dpif-upcall: Fix flow setup/delete race. - learn: Fix memory leak in learn_parse_sepc() - netdev-dpdk: fix mempool_configure error state - vswitchd: Add --cleanup option to the 'appctl exit' command - ofp-parse: Fix memory leak on error path in parse_ofp_group_mod_file(). - actions: Fix memory leak on error path in parse_ct_lb_action(). - dpif-netdev: Fix use-after-free error in reconfigure_datapath(). - bridge: Fix memory leak in bridge_aa_update_trunks(). - dpif-netlink: Fix multiple-free and fd leak on error path. - ofp-print: Avoid array overread in print_table_instruction_features(). - flow: Fix buffer overread in flow_hash_symmetric_l3l4(). - systemd: start vswitchd after udev - ofp-util: Check length of buckets in ofputil_pull_ofp15_group_mod(). - ovsdb-types: Fix memory leak on error path. - tnl-ports: Fix loss of tunneling upon removal of a single tunnel port. - netdev: check for NULL fields in netdev_get_addrs - netdev-dpdk: vhost get stats fix. - netdev-dpdk: use 64-bit arithmetic when converting rates. - ofp-util: Fix buffer overread in ofputil_decode_bundle_add(). - ofp-util: Fix memory leaks on error cases in ofputil_decode_group_mod(). - ofp-util: Fix memory leaks when parsing OF1.5 group properties. - ofp-actions: Fix buffer overread in decode_LEARN_specs(). - flow: Fix buffer overread for crafted IPv6 packets. - ofp-actions: Properly interpret "output:in_port". - ovs-ofctl: Avoid read overrun in ofperr_decode_msg(). - odp-util: Avoid misaligned references to ip6_hdr. - ofproto-dpif-upcall: Fix action attr iteration. - ofproto-dpif-upcall: Fix key attr iteration. - netdev-dpdk: vhost get stats fix. - netdev-dpdk: use 64-bit arithmetic when converting rates. - ofp-util: Fix buffer overread in ofputil_decode_bundle_add(). - ofp-util: Fix memory leaks on error cases in ofputil_decode_group_mod(). - ofp-util: Fix memory leaks when parsing OF1.5 group properties. - odp-util: Fix buffer overread in parsing string form of ODP flows. - ovs-vsctl: Fix segfault when attempting to del-port from parent bridge. This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1562=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): openvswitch-2.7.6-19.1 openvswitch-debuginfo-2.7.6-19.1 openvswitch-debugsource-2.7.6-19.1 openvswitch-devel-2.7.6-19.1 openvswitch-ovn-central-2.7.6-19.1 openvswitch-ovn-central-debuginfo-2.7.6-19.1 openvswitch-ovn-common-2.7.6-19.1 openvswitch-ovn-common-debuginfo-2.7.6-19.1 openvswitch-ovn-docker-2.7.6-19.1 openvswitch-ovn-host-2.7.6-19.1 openvswitch-ovn-host-debuginfo-2.7.6-19.1 openvswitch-ovn-vtep-2.7.6-19.1 openvswitch-ovn-vtep-debuginfo-2.7.6-19.1 openvswitch-pki-2.7.6-19.1 openvswitch-test-2.7.6-19.1 openvswitch-test-debuginfo-2.7.6-19.1 openvswitch-vtep-2.7.6-19.1 openvswitch-vtep-debuginfo-2.7.6-19.1 python-openvswitch-2.7.6-19.1 python-openvswitch-test-2.7.6-19.1 References: https://www.suse.com/security/cve/CVE-2018-17204.html https://www.suse.com/security/cve/CVE-2018-17205.html https://www.suse.com/security/cve/CVE-2018-17206.html https://bugzilla.suse.com/1104467 [View Less]

1 0

openSUSE-SU-2018:4147-1: moderate: Security update for qemu
by opensuse-security＠opensuse.org 15 Dec '18

15 Dec '18

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4147-1 Rating: moderate References: #1100408 #1106222 #1110910 #1111006 #1111010 #1111013 #1114422 Cross-References: CVE-2018-10839 CVE-2018-15746 CVE-2018-17958 CVE-2018-17962 CVE-2018-17963 CVE-2018-18849 Affected Products: … [View More]openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has one errata is now available. Description: This update for qemu fixes the following issues: Security issues fixed: - CVE-2018-10839: Fixed NE2000 NIC emulation support that is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use this flaw to crash the Qemu process resulting in DoS (bsc#1110910). - CVE-2018-15746: Fixed qemu-seccomp.c that might allow local OS guest users to cause a denial of service (guest crash) by leveraging mishandling of the seccomp policy for threads other than the main thread (bsc#1106222). - CVE-2018-17958: Fixed a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer data type is used (bsc#1111006). - CVE-2018-17962: Fixed a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used (bsc#1111010). - CVE-2018-17963: Fixed qemu_deliver_packet_iov in net/net.c that accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service or possibly have unspecified other impact. (bsc#1111013) - CVE-2018-18849: Fixed an out of bounds memory access issue that was found in the LSI53C895A SCSI Host Bus Adapter emulation while writing a message in lsi_do_msgin. It could occur during migration if the 'msg_len' field has an invalid value. A user/process could use this flaw to crash the Qemu process resulting in DoS (bsc#1114422). Non-security issues fixed: - Improving disk performance for qemu on xen (bsc#1100408) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1563=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): qemu-linux-user-2.9.1-50.1 qemu-linux-user-debuginfo-2.9.1-50.1 qemu-linux-user-debugsource-2.9.1-50.1 - openSUSE Leap 42.3 (x86_64): qemu-2.9.1-50.1 qemu-arm-2.9.1-50.1 qemu-arm-debuginfo-2.9.1-50.1 qemu-block-curl-2.9.1-50.1 qemu-block-curl-debuginfo-2.9.1-50.1 qemu-block-dmg-2.9.1-50.1 qemu-block-dmg-debuginfo-2.9.1-50.1 qemu-block-iscsi-2.9.1-50.1 qemu-block-iscsi-debuginfo-2.9.1-50.1 qemu-block-rbd-2.9.1-50.1 qemu-block-rbd-debuginfo-2.9.1-50.1 qemu-block-ssh-2.9.1-50.1 qemu-block-ssh-debuginfo-2.9.1-50.1 qemu-debugsource-2.9.1-50.1 qemu-extra-2.9.1-50.1 qemu-extra-debuginfo-2.9.1-50.1 qemu-guest-agent-2.9.1-50.1 qemu-guest-agent-debuginfo-2.9.1-50.1 qemu-ksm-2.9.1-50.1 qemu-kvm-2.9.1-50.1 qemu-lang-2.9.1-50.1 qemu-ppc-2.9.1-50.1 qemu-ppc-debuginfo-2.9.1-50.1 qemu-s390-2.9.1-50.1 qemu-s390-debuginfo-2.9.1-50.1 qemu-testsuite-2.9.1-50.1 qemu-tools-2.9.1-50.1 qemu-tools-debuginfo-2.9.1-50.1 qemu-x86-2.9.1-50.1 qemu-x86-debuginfo-2.9.1-50.1 - openSUSE Leap 42.3 (noarch): qemu-ipxe-1.0.0+-50.1 qemu-seabios-1.10.2-50.1 qemu-sgabios-8-50.1 qemu-vgabios-1.10.2-50.1 References: https://www.suse.com/security/cve/CVE-2018-10839.html https://www.suse.com/security/cve/CVE-2018-15746.html https://www.suse.com/security/cve/CVE-2018-17958.html https://www.suse.com/security/cve/CVE-2018-17962.html https://www.suse.com/security/cve/CVE-2018-17963.html https://www.suse.com/security/cve/CVE-2018-18849.html https://bugzilla.suse.com/1100408 https://bugzilla.suse.com/1106222 https://bugzilla.suse.com/1110910 https://bugzilla.suse.com/1111006 https://bugzilla.suse.com/1111010 https://bugzilla.suse.com/1111013 https://bugzilla.suse.com/1114422 [View Less]

1 0

openSUSE-RU-2018:4146-1: moderate: Recommended update for libcdio
by maintenance＠opensuse.org 15 Dec '18

15 Dec '18

openSUSE Recommended Update: Recommended update for libcdio ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4146-1 Rating: moderate References: #1108134 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libcdio fixes the … [View More]

1 0

openSUSE-RU-2018:4145-1: moderate: Recommended update for yast2-storage-ng
by maintenance＠opensuse.org 15 Dec '18

15 Dec '18

openSUSE Recommended Update: Recommended update for yast2-storage-ng ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4145-1 Rating: moderate References: #1115508 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-… [View More]

1 0

openSUSE-SU-2018:4144-1: moderate: Security update for tcpdump
by opensuse-security＠opensuse.org 15 Dec '18

15 Dec '18

openSUSE Security Update: Security update for tcpdump ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4144-1 Rating: moderate References: #1117267 Cross-References: CVE-2018-19519 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update … [View More]

1 0

openSUSE-SU-2018:4143-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 15 Dec '18

15 Dec '18

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4143-1 Rating: important References: #1118529 #1119364 Cross-References: CVE-2018-17480 CVE-2018-17481 CVE-2018-18335 CVE-2018-18336 CVE-2018-18337 CVE-2018-18338 CVE-2018-18339 CVE-2018-18340 CVE-2018-18341 CVE-2018-18342 CVE-2018-18343 CVE-… [View More]

1 0

openSUSE-SU-2018:4142-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 15 Dec '18

15 Dec '18

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4142-1 Rating: important References: #1118529 #1119364 Cross-References: CVE-2018-17480 CVE-2018-17481 CVE-2018-18335 CVE-2018-18336 CVE-2018-18337 CVE-2018-18338 CVE-2018-18339 CVE-2018-18340 CVE-2018-18341 CVE-2018-18342 CVE-2018-18343 CVE-… [View More]

1 0

openSUSE-SU-2018:4141-1: important: Security update for cups
by opensuse-security＠opensuse.org 15 Dec '18

15 Dec '18

openSUSE Security Update: Security update for cups ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4141-1 Rating: important References: #1115750 Cross-References: CVE-2018-4700 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update … [View More]

1 0

openSUSE-SU-2018:4140-1: important: Security update for ghostscript
by opensuse-security＠opensuse.org 15 Dec '18

15 Dec '18

openSUSE Security Update: Security update for ghostscript ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4140-1 Rating: important References: #1109105 #1111479 #1111480 #1112229 #1117022 #1117274 #1117313 #1117327 #1117331 Cross-References: CVE-2018-17183 CVE-2018-17961 CVE-2018-18073 CVE-2018-18284 CVE-2018-19409 CVE-2018-19475 CVE-2018-19476 … [View More]

1 0

Main

Development

Information

Community

Social Media

Other

openSUSE Updates