April 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2018:0917-1: moderate: Security update for mercurial
by opensuse-security＠opensuse.org 10 Apr '18

10 Apr '18

openSUSE Security Update: Security update for mercurial ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0917-1 Rating: moderate References: #1085211 Cross-References: CVE-2018-1000132 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for mercurial fixes the following issue: - CVE-2018-1000132: Remote attackers may bypass HTTP server permissions via batch wire protocol commands (bsc#1085211) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-349=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): mercurial-4.2.3-12.1 mercurial-debuginfo-4.2.3-12.1 mercurial-debugsource-4.2.3-12.1 - openSUSE Leap 42.3 (noarch): mercurial-lang-4.2.3-12.1 References: https://www.suse.com/security/cve/CVE-2018-1000132.html https://bugzilla.suse.com/1085211

1 0

openSUSE-RU-2018:0916-1: Recommended update for pasystray
by maintenance＠opensuse.org 10 Apr '18

10 Apr '18

openSUSE Recommended Update: Recommended update for pasystray ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0916-1 Rating: low References: #1084813 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pasystray fixes the following issues: - boo#1084813: Avoid crashes of pasystray due to missing dependendy on PulseAudio Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-353=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): pasystray-0.6.0-8.1 pasystray-debuginfo-0.6.0-8.1 pasystray-debugsource-0.6.0-8.1 References: https://bugzilla.suse.com/1084813

1 0

openSUSE-SU-2018:0914-1: moderate: Security update for git
by opensuse-security＠opensuse.org 10 Apr '18

10 Apr '18

openSUSE Security Update: Security update for git ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0914-1 Rating: moderate References: #1063412 Cross-References: CVE-2017-15298 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for git fixes the following issue: - CVE-2017-15298: Specially crafted repositories could have caused a denial of service (boo#1063412) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-352=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): git-2.13.6-10.1 git-arch-2.13.6-10.1 git-core-2.13.6-10.1 git-core-debuginfo-2.13.6-10.1 git-credential-gnome-keyring-2.13.6-10.1 git-credential-gnome-keyring-debuginfo-2.13.6-10.1 git-cvs-2.13.6-10.1 git-daemon-2.13.6-10.1 git-daemon-debuginfo-2.13.6-10.1 git-debugsource-2.13.6-10.1 git-email-2.13.6-10.1 git-gui-2.13.6-10.1 git-svn-2.13.6-10.1 git-svn-debuginfo-2.13.6-10.1 git-web-2.13.6-10.1 gitk-2.13.6-10.1 - openSUSE Leap 42.3 (noarch): git-doc-2.13.6-10.1 References: https://www.suse.com/security/cve/CVE-2017-15298.html https://bugzilla.suse.com/1063412

1 0

openSUSE-RU-2018:0913-1: moderate: Recommended update for glslang, spirv-headers, spirv-tools, vulkan
by maintenance＠opensuse.org 10 Apr '18

10 Apr '18

openSUSE Recommended Update: Recommended update for glslang, spirv-headers, spirv-tools, vulkan ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0913-1 Rating: moderate References: #1086440 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for glslang, spirv-headers, spirv-tools, vulkan fixes the following issues: It provides x86 32bit library variants of the Vulkan stack for use by WINE and WINE development. (boo#1086440) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-350=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): glslang-debugsource-2.3.g537-4.3.1 glslang-devel-2.3.g537-4.3.1 glslang-devel-debuginfo-2.3.g537-4.3.1 libSPIRV-Tools-1_1-1.1.g41-4.3.1 libSPIRV-Tools-1_1-debuginfo-1.1.g41-4.3.1 libvulkan1-1.0.3.g5493-4.3.1 libvulkan1-debuginfo-1.0.3.g5493-4.3.1 spirv-tools-1.1.g41-4.3.1 spirv-tools-debuginfo-1.1.g41-4.3.1 spirv-tools-debugsource-1.1.g41-4.3.1 spirv-tools-devel-1.1.g41-4.3.1 vulkan-1.0.3.g5493-4.3.1 vulkan-debuginfo-1.0.3.g5493-4.3.1 vulkan-debugsource-1.0.3.g5493-4.3.1 vulkan-devel-1.0.3.g5493-4.3.1 - openSUSE Leap 42.3 (x86_64): libSPIRV-Tools-1_1-32bit-1.1.g41-4.3.1 libSPIRV-Tools-1_1-debuginfo-32bit-1.1.g41-4.3.1 libvulkan1-32bit-1.0.3.g5493-4.3.1 libvulkan1-debuginfo-32bit-1.0.3.g5493-4.3.1 vulkan-devel-32bit-1.0.3.g5493-4.3.1 - openSUSE Leap 42.3 (noarch): spirv-headers-1.1.g15-4.3.1 References: https://bugzilla.suse.com/1086440

1 0

openSUSE-RU-2018:0908-1: moderate: Recommended update for openconnect
by maintenance＠opensuse.org 10 Apr '18

10 Apr '18

openSUSE Recommended Update: Recommended update for openconnect ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0908-1 Rating: moderate References: #1056389 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openconnect fixes the following issues: - openconnect would fail to connect to a Junos Pulse gateway (bsc#1056389) This update to version 7.08 also contains the following improvements and fixes: - Various cryptography related improvements and fixed - Improved support for Cisco DTLS, Pulse Secure 8.2R5, OpenVPN, Juniper VPN Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-348=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 x86_64): openconnect-7.08-6.1 openconnect-devel-7.08-6.1 openconnect-doc-7.08-6.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): openconnect-lang-7.08-6.1 References: https://bugzilla.suse.com/1056389

1 0

openSUSE-RU-2018:0900-1: Recommended update for nvme-cli
by maintenance＠opensuse.org 07 Apr '18

07 Apr '18

openSUSE Recommended Update: Recommended update for nvme-cli ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0900-1 Rating: low References: #1058538 #1076113 #1076127 #1076417 #1078032 #1080672 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for nvme-cli provides the following fix: - Make it possible to pass the full device path when requesting the disconnection. (bsc#1058538) - Return 0 if the disconnect command is successful. (bsc#1076417) - Add ability to specify controller loss timeout when connecting. (bsc#1078032) - Fix identifying active or allocated namespaces list. (bsc#1076113) - Fix the "nvme ns-desc" command by making it request a CNS of 0x03 (Namespace descriptors) instead of a CNS of 0x13 (Controller list). (bsc#1076127) - Add NetApp vendor plugin. (bsc#1080672) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-346=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): nvme-cli-1.2-10.1 nvme-cli-debuginfo-1.2-10.1 nvme-cli-debugsource-1.2-10.1 References: https://bugzilla.suse.com/1058538 https://bugzilla.suse.com/1076113 https://bugzilla.suse.com/1076127 https://bugzilla.suse.com/1076417 https://bugzilla.suse.com/1078032 https://bugzilla.suse.com/1080672

1 0

openSUSE-SU-2018:0899-1: moderate: Security update for wireshark
by opensuse-security＠opensuse.org 07 Apr '18

07 Apr '18

openSUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0899-1 Rating: moderate References: #1088200 Cross-References: CVE-2018-9256 CVE-2018-9259 CVE-2018-9260 CVE-2018-9261 CVE-2018-9262 CVE-2018-9263 CVE-2018-9264 CVE-2018-9265 CVE-2018-9266 CVE-2018-9267 CVE-2018-9268 CVE-2018-9269 CVE-2018-9270 CVE-2018-9271 CVE-2018-9272 CVE-2018-9273 CVE-2018-9274 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 17 vulnerabilities is now available. Description: This update for wireshark fixes the following issues: Minor vulnerabilities that could be used to trigger dissector crashes or cause dissectors to go into large infinite loops by making Wireshark read specially crafted packages from the network or capture files (boo#1088200): - CVE-2018-9264: ADB dissector crash - CVE-2018-9260: IEEE 802.15.4 dissector crash - CVE-2018-9261: NBAP dissector crash - CVE-2018-9262: VLAN dissector crash - CVE-2018-9256: LWAPP dissector crash - CVE-2018-9263: Kerberos dissector crash - CVE-2018-9259: MP4 dissector crash - Memory leaks in multiple dissectors: CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268, CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272, CVE-2018-9273, CVE-2018-9274 This update also contains all upstream bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-2.2.14.html Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-347=1 Package List: - openSUSE Leap 42.3 (x86_64): wireshark-2.2.14-38.1 wireshark-debuginfo-2.2.14-38.1 wireshark-debugsource-2.2.14-38.1 wireshark-devel-2.2.14-38.1 wireshark-ui-gtk-2.2.14-38.1 wireshark-ui-gtk-debuginfo-2.2.14-38.1 wireshark-ui-qt-2.2.14-38.1 wireshark-ui-qt-debuginfo-2.2.14-38.1 References: https://www.suse.com/security/cve/CVE-2018-9256.html https://www.suse.com/security/cve/CVE-2018-9259.html https://www.suse.com/security/cve/CVE-2018-9260.html https://www.suse.com/security/cve/CVE-2018-9261.html https://www.suse.com/security/cve/CVE-2018-9262.html https://www.suse.com/security/cve/CVE-2018-9263.html https://www.suse.com/security/cve/CVE-2018-9264.html https://www.suse.com/security/cve/CVE-2018-9265.html https://www.suse.com/security/cve/CVE-2018-9266.html https://www.suse.com/security/cve/CVE-2018-9267.html https://www.suse.com/security/cve/CVE-2018-9268.html https://www.suse.com/security/cve/CVE-2018-9269.html https://www.suse.com/security/cve/CVE-2018-9270.html https://www.suse.com/security/cve/CVE-2018-9271.html https://www.suse.com/security/cve/CVE-2018-9272.html https://www.suse.com/security/cve/CVE-2018-9273.html https://www.suse.com/security/cve/CVE-2018-9274.html https://bugzilla.suse.com/1088200

1 0

openSUSE-RU-2018:0898-1: Recommended update for kdump
by maintenance＠opensuse.org 07 Apr '18

07 Apr '18

openSUSE Recommended Update: Recommended update for kdump ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0898-1 Rating: low References: #1002617 #1021484 #1036223 #1047606 #1047781 #1048178 #1056497 #1068234 #951144 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 9 recommended fixes can now be installed. Description: This update for kdump provides the following fixes: - Fix a ssh login issue. Only field hosts in /etc/nsswitch is needed for /etc/hosts. (bsc#1048178, bsc#1002617) - Don't exit even if the initrd is not built. (bsc#1047781) - Limit kdump CPUs to the number provided in the configuration. (bsc#1036223, bsc#1068234) - Don't split vmcore by default. (bsc#1036223, bsc#1068234) - Ensure added kdump-early.service is enabled properly after update. (bsc#1021484, bsc#1047606) - Change the logic in load.sh to use kexec_load first. If it fails or if it is blocked by the kernel, then try kexec_load_file on x86_64. (bsc#951144, bsc#1056497) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-345=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): kdump-0.8.16-5.3.1 kdump-debuginfo-0.8.16-5.3.1 kdump-debugsource-0.8.16-5.3.1 References: https://bugzilla.suse.com/1002617 https://bugzilla.suse.com/1021484 https://bugzilla.suse.com/1036223 https://bugzilla.suse.com/1047606 https://bugzilla.suse.com/1047781 https://bugzilla.suse.com/1048178 https://bugzilla.suse.com/1056497 https://bugzilla.suse.com/1068234 https://bugzilla.suse.com/951144

1 0

openSUSE-SU-2018:0894-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 06 Apr '18

06 Apr '18

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0894-1 Rating: moderate References: #1050087 Cross-References: CVE-2017-11524 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for GraphicsMagick fixes the following issue: - CVE-2017-11524: An attacker could have used a crafted file to cause a denial of service (assertion failure and application exit) (bsc#1050087) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-344=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): GraphicsMagick-1.3.25-82.1 GraphicsMagick-debuginfo-1.3.25-82.1 GraphicsMagick-debugsource-1.3.25-82.1 GraphicsMagick-devel-1.3.25-82.1 libGraphicsMagick++-Q16-12-1.3.25-82.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.25-82.1 libGraphicsMagick++-devel-1.3.25-82.1 libGraphicsMagick-Q16-3-1.3.25-82.1 libGraphicsMagick-Q16-3-debuginfo-1.3.25-82.1 libGraphicsMagick3-config-1.3.25-82.1 libGraphicsMagickWand-Q16-2-1.3.25-82.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.25-82.1 perl-GraphicsMagick-1.3.25-82.1 perl-GraphicsMagick-debuginfo-1.3.25-82.1 References: https://www.suse.com/security/cve/CVE-2017-11524.html https://bugzilla.suse.com/1050087

1 0

openSUSE-SU-2018:0893-1: moderate: Security update for ImageMagick
by opensuse-security＠opensuse.org 06 Apr '18

06 Apr '18

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0893-1 Rating: moderate References: #1043290 #1050087 #1056434 #1058630 #1059735 #1060382 #1066168 #1066170 #1082283 #1082291 #1082348 #1082362 #1082792 #1082837 #1083628 #1083634 #1086011 Cross-References: CVE-2017-11524 CVE-2017-12692 CVE-2017-12693 CVE-2017-13768 CVE-2017-14314 CVE-2017-14505 CVE-2017-14739 CVE-2017-15016 CVE-2017-15017 CVE-2017-16352 CVE-2017-16353 CVE-2017-18209 CVE-2017-18211 CVE-2017-9500 CVE-2018-7443 CVE-2018-7470 CVE-2018-8804 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 17 vulnerabilities is now available. Description: This update for ImageMagick fixes several issues. These security issues were fixed: - CVE-2018-8804: The WriteEPTImage function allowed remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact via a crafted file (bsc#1086011). - CVE-2017-11524: The WriteBlob function allowed remote attackers to cause a denial of service (assertion failure and application exit) via a crafted file (bsc#1050087). - CVE-2017-18209: Prevent NULL pointer dereference in the GetOpenCLCachedFilesDirectory function caused by a memory allocation result that was not checked, related to GetOpenCLCacheDirectory (bsc#1083628). - CVE-2017-18211: Prevent NULL pointer dereference in the function saveBinaryCLProgram caused by a program-lookup result not being checked, related to CacheOpenCLKernel (bsc#1083634). - CVE-2017-9500: Prevent assertion failure in the function ResetImageProfileIterator, which allowed attackers to cause a denial of service via a crafted file (bsc#1043290). - CVE-2017-14739: The AcquireResampleFilterThreadSet function mishandled failed memory allocation, which allowed remote attackers to cause a denial of service (NULL Pointer Dereference in DistortImage in MagickCore/distort.c, and application crash) via unspecified vectors (bsc#1060382). - CVE-2017-16353: Prevent memory information disclosure in the DescribeImage function caused by a heap-based buffer over-read. The portion of the code containing the vulnerability is responsible for printing the IPTC Profile information contained in the image. This vulnerability can be triggered with a specially crafted MIFF file. There is an out-of-bounds buffer dereference because certain increments were never checked (bsc#1066170). - CVE-2017-16352: Prevent a heap-based buffer overflow in the "Display visual image directory" feature of the DescribeImage() function. One possible way to trigger the vulnerability is to run the identify command on a specially crafted MIFF format file with the verbose flag (bsc#1066168). - CVE-2017-14314: Prevent off-by-one error in the DrawImage function that allowed remote attackers to cause a denial of service (DrawDashPolygon heap-based buffer over-read and application crash) via a crafted file (bsc#1058630). - CVE-2017-13768: Prevent NULL pointer dereference in the IdentifyImage function that allowed an attacker to perform denial of service by sending a crafted image file (bsc#1056434). - CVE-2017-14505: Fixed handling of NULL arrays, which allowed attackers to perform Denial of Service (NULL pointer dereference and application crash in AcquireQuantumMemory within MagickCore/memory.c) by providing a crafted Image File as input (bsc#1059735). - CVE-2018-7470: The IsWEBPImageLossless function allowed attackers to cause a denial of service (segmentation violation) via a crafted file (bsc#1082837). - CVE-2018-7443: The ReadTIFFImage function did not properly validate the amount of image data in a file, which allowed remote attackers to cause a denial of service (memory allocation failure in the AcquireMagickMemory function in MagickCore/memory.c) (bsc#1082792). - CVE-2017-15016: Prevent NULL pointer dereference vulnerability in ReadEnhMetaFile allowing for denial of service (bsc#1082291). - CVE-2017-15017: Prevent NULL pointer dereference vulnerability in ReadOneMNGImage allowing for denial of service (bsc#1082283). - CVE-2017-12692: The ReadVIFFImage function allowed remote attackers to cause a denial of service (memory consumption) via a crafted VIFF file (bsc#1082362). - CVE-2017-12693: The ReadBMPImage function allowed remote attackers to cause a denial of service (memory consumption) via a crafted BMP file (bsc#1082348). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-343=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ImageMagick-6.8.8.1-58.1 ImageMagick-debuginfo-6.8.8.1-58.1 ImageMagick-debugsource-6.8.8.1-58.1 ImageMagick-devel-6.8.8.1-58.1 ImageMagick-extra-6.8.8.1-58.1 ImageMagick-extra-debuginfo-6.8.8.1-58.1 libMagick++-6_Q16-3-6.8.8.1-58.1 libMagick++-6_Q16-3-debuginfo-6.8.8.1-58.1 libMagick++-devel-6.8.8.1-58.1 libMagickCore-6_Q16-1-6.8.8.1-58.1 libMagickCore-6_Q16-1-debuginfo-6.8.8.1-58.1 libMagickWand-6_Q16-1-6.8.8.1-58.1 libMagickWand-6_Q16-1-debuginfo-6.8.8.1-58.1 perl-PerlMagick-6.8.8.1-58.1 perl-PerlMagick-debuginfo-6.8.8.1-58.1 - openSUSE Leap 42.3 (noarch): ImageMagick-doc-6.8.8.1-58.1 - openSUSE Leap 42.3 (x86_64): ImageMagick-devel-32bit-6.8.8.1-58.1 libMagick++-6_Q16-3-32bit-6.8.8.1-58.1 libMagick++-6_Q16-3-debuginfo-32bit-6.8.8.1-58.1 libMagick++-devel-32bit-6.8.8.1-58.1 libMagickCore-6_Q16-1-32bit-6.8.8.1-58.1 libMagickCore-6_Q16-1-debuginfo-32bit-6.8.8.1-58.1 libMagickWand-6_Q16-1-32bit-6.8.8.1-58.1 libMagickWand-6_Q16-1-debuginfo-32bit-6.8.8.1-58.1 References: https://www.suse.com/security/cve/CVE-2017-11524.html https://www.suse.com/security/cve/CVE-2017-12692.html https://www.suse.com/security/cve/CVE-2017-12693.html https://www.suse.com/security/cve/CVE-2017-13768.html https://www.suse.com/security/cve/CVE-2017-14314.html https://www.suse.com/security/cve/CVE-2017-14505.html https://www.suse.com/security/cve/CVE-2017-14739.html https://www.suse.com/security/cve/CVE-2017-15016.html https://www.suse.com/security/cve/CVE-2017-15017.html https://www.suse.com/security/cve/CVE-2017-16352.html https://www.suse.com/security/cve/CVE-2017-16353.html https://www.suse.com/security/cve/CVE-2017-18209.html https://www.suse.com/security/cve/CVE-2017-18211.html https://www.suse.com/security/cve/CVE-2017-9500.html https://www.suse.com/security/cve/CVE-2018-7443.html https://www.suse.com/security/cve/CVE-2018-7470.html https://www.suse.com/security/cve/CVE-2018-8804.html https://bugzilla.suse.com/1043290 https://bugzilla.suse.com/1050087 https://bugzilla.suse.com/1056434 https://bugzilla.suse.com/1058630 https://bugzilla.suse.com/1059735 https://bugzilla.suse.com/1060382 https://bugzilla.suse.com/1066168 https://bugzilla.suse.com/1066170 https://bugzilla.suse.com/1082283 https://bugzilla.suse.com/1082291 https://bugzilla.suse.com/1082348 https://bugzilla.suse.com/1082362 https://bugzilla.suse.com/1082792 https://bugzilla.suse.com/1082837 https://bugzilla.suse.com/1083628 https://bugzilla.suse.com/1083634 https://bugzilla.suse.com/1086011

1 0