February 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2018:0474-1: moderate: Security update for rrdtool
by opensuse-security＠opensuse.org 19 Feb '18

19 Feb '18

openSUSE Security Update: Security update for rrdtool ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0474-1 Rating: moderate References: #1080251 #828003 Cross-References: CVE-2013-2131 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for rrdtool fixes the following issues: - CVE-2013-2131: Added check to the imginfo format to prevent crash or exploit (boo#828003) - Fixed an infinite loop and crashing with pango [boo#1080251] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-175=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): lua-rrdtool-1.4.7-26.3.1 lua-rrdtool-debuginfo-1.4.7-26.3.1 python-rrdtool-1.4.7-26.3.1 python-rrdtool-debuginfo-1.4.7-26.3.1 rrdtool-1.4.7-26.3.1 rrdtool-cached-1.4.7-26.3.1 rrdtool-cached-debuginfo-1.4.7-26.3.1 rrdtool-debuginfo-1.4.7-26.3.1 rrdtool-debugsource-1.4.7-26.3.1 rrdtool-devel-1.4.7-26.3.1 ruby-rrdtool-1.4.7-26.3.1 ruby-rrdtool-debuginfo-1.4.7-26.3.1 tcl-rrdtool-1.4.7-26.3.1 tcl-rrdtool-debuginfo-1.4.7-26.3.1 References: https://www.suse.com/security/cve/CVE-2013-2131.html https://bugzilla.suse.com/1080251 https://bugzilla.suse.com/828003

1 0

openSUSE-SU-2018:0473-1: important: Security update for quagga
by opensuse-security＠opensuse.org 19 Feb '18

19 Feb '18

openSUSE Security Update: Security update for quagga ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0473-1 Rating: important References: #1065641 #1079798 #1079799 #1079800 #1079801 Cross-References: CVE-2017-16227 CVE-2018-5378 CVE-2018-5379 CVE-2018-5380 CVE-2018-5381 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for quagga fixes the following issues: - CVE-2017-16227: Fixed bgpd DoS via specially crafted BGP UPDATE messages (boo#1065641) - CVE-2018-5378: Fixed bgpd bounds check issue via attribute length (Quagga-2018-0543,boo#1079798) - CVE-2018-5379: Fixed bgpd double free when processing UPDATE message (Quagga-2018-1114,boo#1079799) - CVE-2018-5380: Fixed bgpd code-to-string conversion tables overrun (Quagga-2018-1550,boo#1079800) - CVE-2018-5381: Fixed bgpd infinite loop on certain invalid OPEN messages (Quagga-2018-1975,boo#1079801) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-177=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libfpm_pb0-1.1.1-18.3.1 libfpm_pb0-debuginfo-1.1.1-18.3.1 libospf0-1.1.1-18.3.1 libospf0-debuginfo-1.1.1-18.3.1 libospfapiclient0-1.1.1-18.3.1 libospfapiclient0-debuginfo-1.1.1-18.3.1 libquagga_pb0-1.1.1-18.3.1 libquagga_pb0-debuginfo-1.1.1-18.3.1 libzebra1-1.1.1-18.3.1 libzebra1-debuginfo-1.1.1-18.3.1 quagga-1.1.1-18.3.1 quagga-debuginfo-1.1.1-18.3.1 quagga-debugsource-1.1.1-18.3.1 quagga-devel-1.1.1-18.3.1 References: https://www.suse.com/security/cve/CVE-2017-16227.html https://www.suse.com/security/cve/CVE-2018-5378.html https://www.suse.com/security/cve/CVE-2018-5379.html https://www.suse.com/security/cve/CVE-2018-5380.html https://www.suse.com/security/cve/CVE-2018-5381.html https://bugzilla.suse.com/1065641 https://bugzilla.suse.com/1079798 https://bugzilla.suse.com/1079799 https://bugzilla.suse.com/1079800 https://bugzilla.suse.com/1079801

1 0

openSUSE-SU-2018:0471-1: moderate: Security update for rubygem-puppet
by opensuse-security＠opensuse.org 19 Feb '18

19 Feb '18

openSUSE Security Update: Security update for rubygem-puppet ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0471-1 Rating: moderate References: #1080288 Cross-References: CVE-2017-10689 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rubygem-puppet fixes the following issues: - CVE-2017-10689: Reset permissions when unpacking tar in PMT. When using minitar, files are unpacked with whatever permissions are in the tarball. This is potentially unsafe, as tarballs can be easily created with weird permissions (boo#1080288) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-174=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): ruby2.1-rubygem-puppet-3.8.7-23.1 ruby2.1-rubygem-puppet-doc-3.8.7-23.1 ruby2.1-rubygem-puppet-testsuite-3.8.7-23.1 ruby2.2-rubygem-puppet-3.8.7-23.1 ruby2.2-rubygem-puppet-doc-3.8.7-23.1 ruby2.2-rubygem-puppet-testsuite-3.8.7-23.1 ruby2.3-rubygem-puppet-3.8.7-23.1 ruby2.3-rubygem-puppet-doc-3.8.7-23.1 ruby2.3-rubygem-puppet-testsuite-3.8.7-23.1 ruby2.4-rubygem-puppet-3.8.7-23.1 ruby2.4-rubygem-puppet-doc-3.8.7-23.1 ruby2.4-rubygem-puppet-testsuite-3.8.7-23.1 rubygem-puppet-3.8.7-23.1 rubygem-puppet-master-3.8.7-23.1 - openSUSE Leap 42.3 (noarch): rubygem-puppet-emacs-3.8.7-23.1 rubygem-puppet-master-unicorn-3.8.7-23.1 rubygem-puppet-vim-3.8.7-23.1 References: https://www.suse.com/security/cve/CVE-2017-10689.html https://bugzilla.suse.com/1080288

1 0

openSUSE-SU-2018:0470-1: moderate: Security update for ffmpeg
by opensuse-security＠opensuse.org 19 Feb '18

19 Feb '18

openSUSE Security Update: Security update for ffmpeg ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0470-1 Rating: moderate References: #1064577 #1066428 #1069407 #1070762 #1072366 #1078488 #1079368 Cross-References: CVE-2017-15186 CVE-2017-15672 CVE-2017-16840 CVE-2017-17081 CVE-2017-17555 CVE-2018-6392 CVE-2018-6621 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for ffmpeg fixes the following issues: Updated ffmpeg to new bugfix release 3.4.2 * Fix integer overflows, multiplication overflows, undefined shifts, and verify buffer lengths. * avfilter/vf_transpose: Fix used plane count [boo#1078488, CVE-2018-6392] * avcodec/utvideodec: Fix bytes left check in decode_frame() [boo#1079368, CVE-2018-6621] - Enable use of libzvbi for displaying teletext subtitles. - Fixed a DoS in swri_audio_convert() [boo#1072366, CVE-2017-17555]. Update to new bugfix release 3.4.1 * Fixed integer overflows, division by zero, illegal bit shifts * Fixed the gmc_mmx function which failed to validate width and height [boo#1070762, CVE-2017-17081] * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840] * ffplay: use SDL2 audio API - install also doc/ffserver.conf - Update to new upstream release 3.4 * New video filters: deflicker, doublewave, lumakey, pixscope, oscilloscope, robterts, limiter, libvmaf, unpremultiply, tlut2, floodifll, pseudocolor, despill, convolve, vmafmotion. * New audio filters: afir, crossfeed, surround, headphone, superequalizer, haas. * Some video filters with several inputs now use a common set of options: blend, libvmaf, lut3d, overlay, psnr, ssim. They must always be used by name. * librsvg support for svg rasterization * spec-compliant VP9 muxing support in MP4 * Remove the libnut and libschroedinger muxer/demuxer wrappers * drop deprecated qtkit input device (use avfoundation instead) * SUP/PGS subtitle muxer * VP9 tile threading support * KMS screen grabber * CUDA thumbnail filter * V4L2 mem2mem HW assisted codecs * Rockchip MPP hardware decoding * (Not in openSUSE builds, only original ones:) * Gremlin Digital Video demuxer and decoder * Additional frame format support for Interplay MVE movies * Dolby E decoder and SMPTE 337M demuxer * raw G.726 muxer and demuxer, left- and right-justified * NewTek NDI input/output device * FITS demuxer, muxer, decoder and encoder - Fixed a double free in huffyuv [boo#1064577, CVE-2017-15186] - Fixed an out-of-bounds in ffv1dec [boo#1066428, CVE-2017-15672] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-172=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): ffmpeg-3.4.2-14.1 ffmpeg-debuginfo-3.4.2-14.1 ffmpeg-debugsource-3.4.2-14.1 libavcodec-devel-3.4.2-14.1 libavcodec57-3.4.2-14.1 libavcodec57-debuginfo-3.4.2-14.1 libavdevice-devel-3.4.2-14.1 libavdevice57-3.4.2-14.1 libavdevice57-debuginfo-3.4.2-14.1 libavfilter-devel-3.4.2-14.1 libavfilter6-3.4.2-14.1 libavfilter6-debuginfo-3.4.2-14.1 libavformat-devel-3.4.2-14.1 libavformat57-3.4.2-14.1 libavformat57-debuginfo-3.4.2-14.1 libavresample-devel-3.4.2-14.1 libavresample3-3.4.2-14.1 libavresample3-debuginfo-3.4.2-14.1 libavutil-devel-3.4.2-14.1 libavutil55-3.4.2-14.1 libavutil55-debuginfo-3.4.2-14.1 libpostproc-devel-3.4.2-14.1 libpostproc54-3.4.2-14.1 libpostproc54-debuginfo-3.4.2-14.1 libswresample-devel-3.4.2-14.1 libswresample2-3.4.2-14.1 libswresample2-debuginfo-3.4.2-14.1 libswscale-devel-3.4.2-14.1 libswscale4-3.4.2-14.1 libswscale4-debuginfo-3.4.2-14.1 References: https://www.suse.com/security/cve/CVE-2017-15186.html https://www.suse.com/security/cve/CVE-2017-15672.html https://www.suse.com/security/cve/CVE-2017-16840.html https://www.suse.com/security/cve/CVE-2017-17081.html https://www.suse.com/security/cve/CVE-2017-17555.html https://www.suse.com/security/cve/CVE-2018-6392.html https://www.suse.com/security/cve/CVE-2018-6621.html https://bugzilla.suse.com/1064577 https://bugzilla.suse.com/1066428 https://bugzilla.suse.com/1069407 https://bugzilla.suse.com/1070762 https://bugzilla.suse.com/1072366 https://bugzilla.suse.com/1078488 https://bugzilla.suse.com/1079368

1 0

openSUSE-SU-2018:0469-1: moderate: Security update for qpdf
by opensuse-security＠opensuse.org 19 Feb '18

19 Feb '18

openSUSE Security Update: Security update for qpdf ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0469-1 Rating: moderate References: #1040311 #1040312 #1040313 #1050577 #1050578 #1050579 #1050581 #1055960 Cross-References: CVE-2017-11624 CVE-2017-11625 CVE-2017-11626 CVE-2017-11627 CVE-2017-12595 CVE-2017-9208 CVE-2017-9209 CVE-2017-9210 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This version update for qpdf to 7.1.1 fixes the following issues: - Update to version 7.1.1 * Fix one linearization bug affecting files whose first /ID component is not 16 bytes long - Update to version 7.1.0 * Allow raw encryption key to be specified in libary and command line with the QPDF::setPasswordIsHexKey method and --password-is-hex-key option. Allow encryption key to be displayed with --show-encryption-key option. See https://blog.didierstevens.com/2017/12/28/cracking-encrypted-pdfs-part-3/ f or a discussion of using this for cracking encrypted PDFs. I hope that a future release of qpdf will include some additional recovery options that may also make use of this capability. * Fix lexical error: the PDF specification allows floating point numbers to end with "." * Fix link order in the build to avoid conflicts when building from source while an older version of qpdf is installed * Add support for TIFF predictor for LZW and Flate streams. Now * Clarify documentation around options that control parsing but not output creation. Two options: --suppress-recovery and --ignore-xref-streams, were documented in the "Advanced Transformation Options" section of the manual and --help output even though they are not related to output. These are now described in a separate section called "Advanced Parsing Options." * Implement remaining PNG filters for decode. Prior versions could decode only the "up" filter. Now all PNG filters (sub, up, average, Paeth, optimal) are supported for decoding. The implementation of the remaining PNG filters changed the interface to the private Pl_PNGFilter class, but this class's header file is not in the installation, and there is no public interface to the class. Within the library, the class is never allocated on the stack; it is only ever dynamically allocated. As such, this does not actually break binary compatibility of the library. all predictor functions are supported - Update to version 7.0.0 * License is now Apache-2.0 * Add new libjpeg8-devel dependency * Improve the error message that is issued when QPDFWriter encounters a stream that can't be decoded. In particular, mention that the stream will be copied without filtering to avoid data loss. * Add new methods to the C API to correspond to new additions to QPDFWriter: - qpdf_set_compress_streams - qpdf_set_decode_level - qpdf_set_preserve_unreferenced_objects - qpdf_set_newline_before_endstream * Add support for writing PCLm files * QPDF now supports reading and writing streams encoded with JPEG or RunLength encoding. Library API enhancements and command-line options have been added to control this behavior. See command-line options --compress-streams and --decode-level and methods QPDFWriter::setCompressStreams and QPDFWriter::setDecodeLevel. * Page rotation is now supported and accessible from both the library and the command line. * Fixes CVE-2017-12595 boo#1055960, CVE-2017-9208 boo#1040311 CVE-2017-9209 boo#1040312, CVE-2017-9210 boo#1040313, CVE-2017-11627 boo#1050577, CVE-2017-11626 boo#1050578, CVE-2017-11625 boo#1050579, CVE-2017-11624 boo#1050581 - Update to version 6.0.0 * Bump shared library version since 5.2.0 broke ABI. - Update to version 5.2.0 * Support for deterministic /IDs for non-encrypted files. This is off by default. * Handle more invalid xref tables Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-176=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libqpdf18-7.1.1-6.3.1 libqpdf18-debuginfo-7.1.1-6.3.1 qpdf-7.1.1-6.3.1 qpdf-debuginfo-7.1.1-6.3.1 qpdf-debugsource-7.1.1-6.3.1 qpdf-devel-7.1.1-6.3.1 - openSUSE Leap 42.3 (x86_64): cups-filters-1.8.2-4.2.1 cups-filters-cups-browsed-1.8.2-4.2.1 cups-filters-cups-browsed-debuginfo-1.8.2-4.2.1 cups-filters-debuginfo-1.8.2-4.2.1 cups-filters-debugsource-1.8.2-4.2.1 cups-filters-devel-1.8.2-4.2.1 cups-filters-foomatic-rip-1.8.2-4.2.1 cups-filters-foomatic-rip-debuginfo-1.8.2-4.2.1 cups-filters-ghostscript-1.8.2-4.2.1 cups-filters-ghostscript-debuginfo-1.8.2-4.2.1 References: https://www.suse.com/security/cve/CVE-2017-11624.html https://www.suse.com/security/cve/CVE-2017-11625.html https://www.suse.com/security/cve/CVE-2017-11626.html https://www.suse.com/security/cve/CVE-2017-11627.html https://www.suse.com/security/cve/CVE-2017-12595.html https://www.suse.com/security/cve/CVE-2017-9208.html https://www.suse.com/security/cve/CVE-2017-9209.html https://www.suse.com/security/cve/CVE-2017-9210.html https://bugzilla.suse.com/1040311 https://bugzilla.suse.com/1040312 https://bugzilla.suse.com/1040313 https://bugzilla.suse.com/1050577 https://bugzilla.suse.com/1050578 https://bugzilla.suse.com/1050579 https://bugzilla.suse.com/1050581 https://bugzilla.suse.com/1055960

1 0

openSUSE-SU-2018:0468-1: important: Security update for exim
by opensuse-security＠opensuse.org 19 Feb '18

19 Feb '18

openSUSE Security Update: Security update for exim ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0468-1 Rating: important References: #1079832 Cross-References: CVE-2018-6789 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for exim fixes the following issues: - CVE-2018-6789: Fixed a buffer overflow in the base64decode function, which could be used to execute code remotely. (boo#1079832) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-170=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): exim-4.86.2-20.1 exim-debuginfo-4.86.2-20.1 exim-debugsource-4.86.2-20.1 eximon-4.86.2-20.1 eximon-debuginfo-4.86.2-20.1 eximstats-html-4.86.2-20.1 References: https://www.suse.com/security/cve/CVE-2018-6789.html https://bugzilla.suse.com/1079832

1 0

openSUSE-SU-2018:0461-1: moderate: Security update for mupdf
by opensuse-security＠opensuse.org 16 Feb '18

16 Feb '18

openSUSE Security Update: Security update for mupdf ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0461-1 Rating: moderate References: #1080531 Cross-References: CVE-2018-1000051 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for mupdf fixes the following issues: - CVE-2018-1000051: Fixed a use-after-free vulnerability in fz_keep_key_storable that can potentially result in DoS / remote code execution (boo#1080531) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-167=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): mupdf-1.12.0-31.1 mupdf-devel-static-1.12.0-31.1 References: https://www.suse.com/security/cve/CVE-2018-1000051.html https://bugzilla.suse.com/1080531

1 0

openSUSE-SU-2018:0460-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 16 Feb '18

16 Feb '18

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0460-1 Rating: moderate References: #1047900 #1049374 #1051411 #1058009 #1073081 #1074307 #1076182 Cross-References: CVE-2017-11140 CVE-2017-11450 CVE-2017-11722 CVE-2017-14224 CVE-2017-17502 CVE-2017-17912 CVE-2017-18028 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for GraphicsMagick fixes the following issues: - The dcm coder was updated to newest code, covering all currently known security issues. Security issues fixed: - CVE-2017-17502: ReadCMYKImage in ImportCMYKQuantumType had a heap-based buffer over-read via a crafted file. [boo#1073081] - CVE-2017-11450: A remote denial of service in coders/jpeg.c was fixed [boo#1049374] - CVE-2017-11140: coders/jpeg.c allowed remote attackers to cause a denial of service (application crash). [boo#1047900] - CVE-2017-14224: A heap-based buffer overflow in WritePCXImage in coders/pcx.c could lead to denial of service or code execution. [boo#1058009] - CVE-2017-17912: A heap-based buffer over-read in ReadNewsProfile in coders/tiff.c was fixed. [boo#1074307] - CVE-2017-18028: A memory exhaustion in the function ReadTIFFImage in coders/tiff.c was fixed. [boo#1076182] - CVE-2017-11722: The WriteOnePNGImage function in coders/png.c allowed attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file, because the program's actual control flow was inconsistent with its indentation. This resulted in a logging statement executing outside of a loop, and consequently using an invalid array index corresponding to the loop's exit condition. (bsc#1051411) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-166=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): GraphicsMagick-1.3.25-68.1 GraphicsMagick-debuginfo-1.3.25-68.1 GraphicsMagick-debugsource-1.3.25-68.1 GraphicsMagick-devel-1.3.25-68.1 libGraphicsMagick++-Q16-12-1.3.25-68.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.25-68.1 libGraphicsMagick++-devel-1.3.25-68.1 libGraphicsMagick-Q16-3-1.3.25-68.1 libGraphicsMagick-Q16-3-debuginfo-1.3.25-68.1 libGraphicsMagick3-config-1.3.25-68.1 libGraphicsMagickWand-Q16-2-1.3.25-68.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.25-68.1 perl-GraphicsMagick-1.3.25-68.1 perl-GraphicsMagick-debuginfo-1.3.25-68.1 References: https://www.suse.com/security/cve/CVE-2017-11140.html https://www.suse.com/security/cve/CVE-2017-11450.html https://www.suse.com/security/cve/CVE-2017-11722.html https://www.suse.com/security/cve/CVE-2017-14224.html https://www.suse.com/security/cve/CVE-2017-17502.html https://www.suse.com/security/cve/CVE-2017-17912.html https://www.suse.com/security/cve/CVE-2017-18028.html https://bugzilla.suse.com/1047900 https://bugzilla.suse.com/1049374 https://bugzilla.suse.com/1051411 https://bugzilla.suse.com/1058009 https://bugzilla.suse.com/1073081 https://bugzilla.suse.com/1074307 https://bugzilla.suse.com/1076182

1 0

openSUSE-SU-2018:0459-1: important: Security update for xen
by opensuse-security＠opensuse.org 16 Feb '18

16 Feb '18

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0459-1 Rating: important References: #1027519 #1035442 #1051729 #1061081 #1067317 #1068032 #1070158 #1070159 #1070160 #1070163 #1074562 #1076116 #1076180 Cross-References: CVE-2017-15595 CVE-2017-17563 CVE-2017-17564 CVE-2017-17565 CVE-2017-17566 CVE-2017-18030 CVE-2017-5715 CVE-2017-5753 CVE-2017-5754 CVE-2018-5683 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves 10 vulnerabilities and has three fixes is now available. Description: This update for xen fixes several issues. These security issues were fixed: - CVE-2017-5753, CVE-2017-5715, CVE-2017-5754: Prevent information leaks via side effects of speculative execution, aka "Spectre" and "Meltdown" attacks (bsc#1074562, bsc#1068032) - CVE-2017-15595: x86 PV guest OS users were able to cause a DoS (unbounded recursion, stack consumption, and hypervisor crash) or possibly gain privileges via crafted page-table stacking (bsc#1061081) - CVE-2017-17566: Prevent PV guest OS users to cause a denial of service (host OS crash) or gain host OS privileges in shadow mode by mapping a certain auxiliary page (bsc#1070158). - CVE-2017-17563: Prevent guest OS users to cause a denial of service (host OS crash) or gain host OS privileges by leveraging an incorrect mask for reference-count overflow checking in shadow mode (bsc#1070159). - CVE-2017-17564: Prevent guest OS users to cause a denial of service (host OS crash) or gain host OS privileges by leveraging incorrect error handling for reference counting in shadow mode (bsc#1070160). - CVE-2017-17565: Prevent PV guest OS users to cause a denial of service (host OS crash) if shadow mode and log-dirty mode are in place, because of an incorrect assertion related to M2P (bsc#1070163). - CVE-2018-5683: The vga_draw_text function allowed local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging improper memory address validation (bsc#1076116). - CVE-2017-18030: The cirrus_invalidate_region function allowed local OS guest privileged users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors related to negative pitch (bsc#1076180). These non-security issues were fixed: - bsc#1067317: pass cache=writeback|unsafe|directsync to qemu depending on the libxl disk settings - bsc#1051729: Prevent invalid symlinks after install of SLES 12 SP2 - bsc#1035442: Increased the value of LIBXL_DESTROY_TIMEOUT from 10 to 100 seconds. If many domUs shutdown in parallel the backends couldn't keep up - bsc#1027519: Added several upstream patches This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-169=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): xen-4.9.1_08-16.1 xen-debugsource-4.9.1_08-16.1 xen-devel-4.9.1_08-16.1 xen-doc-html-4.9.1_08-16.1 xen-libs-4.9.1_08-16.1 xen-libs-debuginfo-4.9.1_08-16.1 xen-tools-4.9.1_08-16.1 xen-tools-debuginfo-4.9.1_08-16.1 xen-tools-domU-4.9.1_08-16.1 xen-tools-domU-debuginfo-4.9.1_08-16.1 References: https://www.suse.com/security/cve/CVE-2017-15595.html https://www.suse.com/security/cve/CVE-2017-17563.html https://www.suse.com/security/cve/CVE-2017-17564.html https://www.suse.com/security/cve/CVE-2017-17565.html https://www.suse.com/security/cve/CVE-2017-17566.html https://www.suse.com/security/cve/CVE-2017-18030.html https://www.suse.com/security/cve/CVE-2017-5715.html https://www.suse.com/security/cve/CVE-2017-5753.html https://www.suse.com/security/cve/CVE-2017-5754.html https://www.suse.com/security/cve/CVE-2018-5683.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1035442 https://bugzilla.suse.com/1051729 https://bugzilla.suse.com/1061081 https://bugzilla.suse.com/1067317 https://bugzilla.suse.com/1068032 https://bugzilla.suse.com/1070158 https://bugzilla.suse.com/1070159 https://bugzilla.suse.com/1070160 https://bugzilla.suse.com/1070163 https://bugzilla.suse.com/1074562 https://bugzilla.suse.com/1076116 https://bugzilla.suse.com/1076180

1 0

openSUSE-SU-2018:0458-1: important: Security update for openssl-steam
by opensuse-security＠opensuse.org 16 Feb '18

16 Feb '18

openSUSE Security Update: Security update for openssl-steam ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0458-1 Rating: important References: #1001148 #1009528 #1019334 #1022085 #1022086 #1022271 #982268 #982575 #983249 #984323 #990207 #990392 #990419 #990428 #991193 #991877 #992120 #993819 #994749 #994844 #995075 #995324 #995359 #995377 #998190 #999665 #999666 #999668 Cross-References: CVE-2016-2177 CVE-2016-2178 CVE-2016-2179 CVE-2016-2180 CVE-2016-2181 CVE-2016-2182 CVE-2016-2183 CVE-2016-6302 CVE-2016-6303 CVE-2016-6304 CVE-2016-6306 CVE-2016-7052 CVE-2016-7055 CVE-2016-7056 CVE-2017-3731 CVE-2017-3732 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves 16 vulnerabilities and has 12 fixes is now available. Description: This update for openssl-steam fixes the following issues: - Merged changes from upstream openssl (Factory rev 137) into this fork for Steam. Updated to openssl 1.0.2k: * CVE-2016-7055: Montgomery multiplication may produce incorrect results (boo#1009528) * CVE-2016-7056: ECSDA P-256 timing attack key recovery (boo#1019334) * CVE-2017-3731: Truncated packet could crash via OOB read (boo#1022085) * CVE-2017-3732: BN_mod_exp may produce incorrect results on x86_64 (boo#1022086) Update to openssl-1.0.2j: * CVE-2016-7052: Missing CRL sanity check (boo#1001148) OpenSSL Security Advisory [22 Sep 2016] (boo#999665) - Severity: High * CVE-2016-6304: OCSP Status Request extension unbounded memory growth (boo#999666) - Severity: Low * CVE-2016-2177: Pointer arithmetic undefined behaviour (boo#982575) * CVE-2016-2178: Constant time flag not preserved in DSA signing (boo#983249) * CVE-2016-2179: DTLS buffered message DoS (boo#994844) * CVE-2016-2180: OOB read in TS_OBJ_print_bio() (boo#990419) * CVE-2016-2181: DTLS replay protection DoS (boo#994749) * CVE-2016-2182: OOB write in BN_bn2dec() (boo#993819) * CVE-2016-2183: Birthday attack against 64-bit block ciphers (SWEET32) (boo#995359) * CVE-2016-6302: Malformed SHA512 ticket DoS (boo#995324) * CVE-2016-6303: OOB write in MDC2_Update() (boo#995377) * CVE-2016-6306: Certificate message OOB reads (boo#999668) ALso fixed: - fixed a crash in print_notice (boo#998190) - fix X509_CERT_FILE path (boo#1022271) and rename - resume reading from /dev/urandom when interrupted by a signal (boo#995075) - fix problems with locking in FIPS mode (boo#992120) * duplicates: boo#991877, boo#991193, boo#990392, boo#990428 and boo#990207 - drop openssl-fips_RSA_compute_d_with_lcm.patch (upstream) (boo#984323) - don't check for /etc/system-fips (boo#982268) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-168=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libopenssl1_0_0-steam-1.0.2k-4.3.1 libopenssl1_0_0-steam-debuginfo-1.0.2k-4.3.1 openssl-steam-debugsource-1.0.2k-4.3.1 - openSUSE Leap 42.3 (x86_64): libopenssl1_0_0-steam-32bit-1.0.2k-4.3.1 libopenssl1_0_0-steam-debuginfo-32bit-1.0.2k-4.3.1 References: https://www.suse.com/security/cve/CVE-2016-2177.html https://www.suse.com/security/cve/CVE-2016-2178.html https://www.suse.com/security/cve/CVE-2016-2179.html https://www.suse.com/security/cve/CVE-2016-2180.html https://www.suse.com/security/cve/CVE-2016-2181.html https://www.suse.com/security/cve/CVE-2016-2182.html https://www.suse.com/security/cve/CVE-2016-2183.html https://www.suse.com/security/cve/CVE-2016-6302.html https://www.suse.com/security/cve/CVE-2016-6303.html https://www.suse.com/security/cve/CVE-2016-6304.html https://www.suse.com/security/cve/CVE-2016-6306.html https://www.suse.com/security/cve/CVE-2016-7052.html https://www.suse.com/security/cve/CVE-2016-7055.html https://www.suse.com/security/cve/CVE-2016-7056.html https://www.suse.com/security/cve/CVE-2017-3731.html https://www.suse.com/security/cve/CVE-2017-3732.html https://bugzilla.suse.com/1001148 https://bugzilla.suse.com/1009528 https://bugzilla.suse.com/1019334 https://bugzilla.suse.com/1022085 https://bugzilla.suse.com/1022086 https://bugzilla.suse.com/1022271 https://bugzilla.suse.com/982268 https://bugzilla.suse.com/982575 https://bugzilla.suse.com/983249 https://bugzilla.suse.com/984323 https://bugzilla.suse.com/990207 https://bugzilla.suse.com/990392 https://bugzilla.suse.com/990419 https://bugzilla.suse.com/990428 https://bugzilla.suse.com/991193 https://bugzilla.suse.com/991877 https://bugzilla.suse.com/992120 https://bugzilla.suse.com/993819 https://bugzilla.suse.com/994749 https://bugzilla.suse.com/994844 https://bugzilla.suse.com/995075 https://bugzilla.suse.com/995324 https://bugzilla.suse.com/995359 https://bugzilla.suse.com/995377 https://bugzilla.suse.com/998190 https://bugzilla.suse.com/999665 https://bugzilla.suse.com/999666 https://bugzilla.suse.com/999668

1 0