August 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2018:2402-1: moderate: Security update for qemu
by opensuse-security＠opensuse.org 17 Aug '18

17 Aug '18

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2402-1 Rating: moderate References: #1083291 #1087082 #1091695 #1094725 #1094898 #1094913 #1096223 Cross-References: CVE-2018-11806 CVE-2018-3639 CVE-2018-7550 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves three vulnerabilities and has four fixes is now available. Description: This update for qemu to version 2.11.2 fixes the following issues: Security issue fixed: - CVE-2018-11806: Fix heap buffer overflow issue that can happen while reassembling fragmented datagrams (bsc#1096223). - CVE-2018-3639: Mitigation functionality for Speculative Store Bypass issue in x86 (bsc#1087082). - CVE-2018-7550: Fix out of bounds read and write memory access, potentially leading to code execution (bsc#1083291) Bug fixes: - bsc#1091695: SEV guest will not lauchh with qemu-system-x86_64 version 2.11.1. - bsc#1094898: qemu-guest-agent service doesn't work in version Leap 15.0. - bsc#1094725: `virsh blockresize` does not work with Xen qdisks. - bsc#1094913: QEMU crashes when starting a guest with more than 7.999TB. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-894=1 Package List: - openSUSE Leap 15.0 (noarch): qemu-ipxe-1.0.0-lp150.7.6.1 qemu-seabios-1.11.0-lp150.7.6.1 qemu-sgabios-8-lp150.7.6.1 qemu-vgabios-1.11.0-lp150.7.6.1 - openSUSE Leap 15.0 (x86_64): qemu-2.11.2-lp150.7.6.1 qemu-arm-2.11.2-lp150.7.6.1 qemu-arm-debuginfo-2.11.2-lp150.7.6.1 qemu-block-curl-2.11.2-lp150.7.6.1 qemu-block-curl-debuginfo-2.11.2-lp150.7.6.1 qemu-block-dmg-2.11.2-lp150.7.6.1 qemu-block-dmg-debuginfo-2.11.2-lp150.7.6.1 qemu-block-gluster-2.11.2-lp150.7.6.1 qemu-block-gluster-debuginfo-2.11.2-lp150.7.6.1 qemu-block-iscsi-2.11.2-lp150.7.6.1 qemu-block-iscsi-debuginfo-2.11.2-lp150.7.6.1 qemu-block-rbd-2.11.2-lp150.7.6.1 qemu-block-rbd-debuginfo-2.11.2-lp150.7.6.1 qemu-block-ssh-2.11.2-lp150.7.6.1 qemu-block-ssh-debuginfo-2.11.2-lp150.7.6.1 qemu-debuginfo-2.11.2-lp150.7.6.1 qemu-debugsource-2.11.2-lp150.7.6.1 qemu-extra-2.11.2-lp150.7.6.1 qemu-extra-debuginfo-2.11.2-lp150.7.6.1 qemu-guest-agent-2.11.2-lp150.7.6.1 qemu-guest-agent-debuginfo-2.11.2-lp150.7.6.1 qemu-ksm-2.11.2-lp150.7.6.1 qemu-kvm-2.11.2-lp150.7.6.1 qemu-lang-2.11.2-lp150.7.6.1 qemu-linux-user-2.11.2-lp150.7.6.1 qemu-linux-user-debuginfo-2.11.2-lp150.7.6.1 qemu-linux-user-debugsource-2.11.2-lp150.7.6.1 qemu-ppc-2.11.2-lp150.7.6.1 qemu-ppc-debuginfo-2.11.2-lp150.7.6.1 qemu-s390-2.11.2-lp150.7.6.1 qemu-s390-debuginfo-2.11.2-lp150.7.6.1 qemu-testsuite-2.11.2-lp150.7.6.1 qemu-tools-2.11.2-lp150.7.6.1 qemu-tools-debuginfo-2.11.2-lp150.7.6.1 qemu-x86-2.11.2-lp150.7.6.1 qemu-x86-debuginfo-2.11.2-lp150.7.6.1 References: https://www.suse.com/security/cve/CVE-2018-11806.html https://www.suse.com/security/cve/CVE-2018-3639.html https://www.suse.com/security/cve/CVE-2018-7550.html https://bugzilla.suse.com/1083291 https://bugzilla.suse.com/1087082 https://bugzilla.suse.com/1091695 https://bugzilla.suse.com/1094725 https://bugzilla.suse.com/1094898 https://bugzilla.suse.com/1094913 https://bugzilla.suse.com/1096223

1 0

openSUSE-SU-2018:2400-1: important: Security update for samba
by opensuse-security＠opensuse.org 17 Aug '18

17 Aug '18

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2400-1 Rating: important References: #1095048 #1095056 #1095057 #1103411 #1103414 Cross-References: CVE-2018-10858 CVE-2018-10918 CVE-2018-10919 CVE-2018-1139 CVE-2018-1140 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for samba fixes the following issues: The following security vulnerabilities were fixed: - CVE-2018-1139: Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048) - CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes; (bsc#1095056) - CVE-2018-10919: Confidential attribute disclosure via substring search; (bsc#1095057) - CVE-2018-10858: smbc_urlencode helper function is a subject to buffer overflow; (bsc#1103411) - CVE-2018-10918: Fix NULL ptr dereference in DsCrackNames on a user without a SPN; (bsc#1103414) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-891=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): ctdb-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 ctdb-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 ctdb-pcp-pmda-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 ctdb-pcp-pmda-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 ctdb-tests-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 ctdb-tests-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libdcerpc-binding0-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libdcerpc-binding0-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libdcerpc-devel-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libdcerpc-samr-devel-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libdcerpc-samr0-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libdcerpc-samr0-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libdcerpc0-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libdcerpc0-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libndr-devel-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libndr-krb5pac-devel-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libndr-krb5pac0-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libndr-krb5pac0-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libndr-nbt-devel-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libndr-nbt0-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libndr-nbt0-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libndr-standard-devel-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libndr-standard0-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libndr-standard0-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libndr0-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libndr0-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libnetapi-devel-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libnetapi0-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libnetapi0-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-credentials-devel-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-credentials0-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-credentials0-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-errors-devel-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-errors0-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-errors0-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-hostconfig-devel-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-hostconfig0-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-hostconfig0-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-passdb-devel-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-passdb0-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-passdb0-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-policy-devel-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-policy0-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-policy0-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-util-devel-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-util0-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-util0-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamdb-devel-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamdb0-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamdb0-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsmbclient-devel-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsmbclient0-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsmbclient0-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsmbconf-devel-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsmbconf0-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsmbconf0-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsmbldap-devel-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsmbldap2-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsmbldap2-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libtevent-util-devel-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libtevent-util0-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libtevent-util0-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libwbclient-devel-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libwbclient0-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libwbclient0-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-client-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-client-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-core-devel-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-debugsource-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-dsdb-modules-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-dsdb-modules-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-kdc-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-kdc-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-libs-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-libs-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-pidl-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-python-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-python-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-test-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-test-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-winbind-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-winbind-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 - openSUSE Leap 15.0 (x86_64): libdcerpc-binding0-32bit-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libdcerpc-binding0-32bit-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libdcerpc-samr0-32bit-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libdcerpc-samr0-32bit-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libdcerpc0-32bit-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libdcerpc0-32bit-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libndr-krb5pac0-32bit-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libndr-krb5pac0-32bit-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libndr-nbt0-32bit-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libndr-nbt0-32bit-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libndr-standard0-32bit-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libndr-standard0-32bit-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libndr0-32bit-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libndr0-32bit-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libnetapi0-32bit-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libnetapi0-32bit-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-credentials0-32bit-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-credentials0-32bit-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-errors0-32bit-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-errors0-32bit-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-hostconfig0-32bit-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-hostconfig0-32bit-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-passdb0-32bit-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-passdb0-32bit-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-policy0-32bit-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-policy0-32bit-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-util0-32bit-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamba-util0-32bit-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamdb0-32bit-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsamdb0-32bit-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsmbclient0-32bit-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsmbclient0-32bit-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsmbconf0-32bit-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsmbconf0-32bit-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsmbldap2-32bit-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libsmbldap2-32bit-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libtevent-util0-32bit-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libtevent-util0-32bit-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libwbclient0-32bit-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 libwbclient0-32bit-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-ceph-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-ceph-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-client-32bit-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-client-32bit-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-kdc-32bit-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-kdc-32bit-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-libs-32bit-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-libs-32bit-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-winbind-32bit-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 samba-winbind-32bit-debuginfo-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 - openSUSE Leap 15.0 (noarch): samba-doc-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 References: https://www.suse.com/security/cve/CVE-2018-10858.html https://www.suse.com/security/cve/CVE-2018-10918.html https://www.suse.com/security/cve/CVE-2018-10919.html https://www.suse.com/security/cve/CVE-2018-1139.html https://www.suse.com/security/cve/CVE-2018-1140.html https://bugzilla.suse.com/1095048 https://bugzilla.suse.com/1095056 https://bugzilla.suse.com/1095057 https://bugzilla.suse.com/1103411 https://bugzilla.suse.com/1103414

1 0

openSUSE-SU-2018:2399-1: important: Security update to ucode-intel
by opensuse-security＠opensuse.org 17 Aug '18

17 Aug '18

openSUSE Security Update: Security update to ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2399-1 Rating: important References: #1087082 #1087083 #1089343 #1104134 Cross-References: CVE-2018-3639 CVE-2018-3640 CVE-2018-3646 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: ucode-intel was updated to the 20180807 release. For the listed CPU chipsets this fixes CVE-2018-3640 (Spectre v3a) and is part of the mitigations for CVE-2018-3639 (Spectre v4) and CVE-2018-3646 (L1 Terminal fault). (bsc#1104134 bsc#1087082 bsc#1087083 bsc#1089343) Processor Identifier Version Products Model Stepping F-MO-S/PI Old->New ---- new platforms ---------------------------------------- WSM-EP/WS U1 6-2c-2/03 0000001f Xeon E/L/X56xx, W36xx NHM-EX D0 6-2e-6/04 0000000d Xeon E/L/X65xx/75xx BXT C0 6-5c-2/01 00000014 Atom T5500/5700 APL E0 6-5c-a/03 0000000c Atom x5-E39xx DVN B0 6-5f-1/01 00000024 Atom C3xxx ---- updated platforms ------------------------------------ NHM-EP/WS D0 6-1a-5/03 00000019->0000001d Xeon E/L/X/W55xx NHM B1 6-1e-5/13 00000007->0000000a Core i7-8xx, i5-7xx; Xeon L3426, X24xx WSM B1 6-25-2/12 0000000e->00000011 Core i7-6xx, i5-6xx/4xxM, i3-5xx/3xxM, Pentium G69xx, Celeon P45xx; Xeon L3406 WSM K0 6-25-5/92 00000004->00000007 Core i7-6xx, i5-6xx/5xx/4xx, i3-5xx/3xx, Pentium G69xx/P6xxx/U5xxx, Celeron P4xxx/U3xxx SNB D2 6-2a-7/12 0000002d->0000002e Core Gen2; Xeon E3 WSM-EX A2 6-2f-2/05 00000037->0000003b Xeon E7 IVB E2 6-3a-9/12 0000001f->00000020 Core Gen3 Mobile HSW-H/S/E3 Cx/Dx 6-3c-3/32 00000024->00000025 Core Gen4 Desktop; Xeon E3 v3 BDW-U/Y E/F 6-3d-4/c0 0000002a->0000002b Core Gen5 Mobile HSW-ULT Cx/Dx 6-45-1/72 00000023->00000024 Core Gen4 Mobile and derived Pentium/Celeron HSW-H Cx 6-46-1/32 00000019->0000001a Core Extreme i7-5xxxX BDW-H/E3 E/G 6-47-1/22 0000001d->0000001e Core i5-5xxxR/C, i7-5xxxHQ/EQ; Xeon E3 v4 SKL-U/Y D0 6-4e-3/c0 000000c2->000000c6 Core Gen6 Mobile BDX-DE V1 6-56-2/10 00000015->00000017 Xeon D-1520/40 BDX-DE V2/3 6-56-3/10 07000012->07000013 Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19 BDX-DE Y0 6-56-4/10 0f000011->0f000012 Xeon D-1557/59/67/71/77/81/87 APL D0 6-5c-9/03 0000002c->00000032 Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx SKL-H/S/E3 R0 6-5e-3/36 000000c2->000000c6 Core Gen6; Xeon E3 v5 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-887=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-887=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ucode-intel-20180807-28.1 ucode-intel-blob-20180807-28.1 ucode-intel-debuginfo-20180807-28.1 ucode-intel-debugsource-20180807-28.1 - openSUSE Leap 15.0 (x86_64): ucode-intel-20180807-lp150.2.7.1 References: https://www.suse.com/security/cve/CVE-2018-3639.html https://www.suse.com/security/cve/CVE-2018-3640.html https://www.suse.com/security/cve/CVE-2018-3646.html https://bugzilla.suse.com/1087082 https://bugzilla.suse.com/1087083 https://bugzilla.suse.com/1089343 https://bugzilla.suse.com/1104134

1 0

openSUSE-RU-2018:2398-1: moderate: Recommended update for openSUSE-release
by maintenance＠opensuse.org 17 Aug '18

17 Aug '18

openSUSE Recommended Update: Recommended update for openSUSE-release ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2398-1 Rating: moderate References: #1104362 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The lifetime of openSUSE Leap 42.3 was extended to 2019-06-30. This update documents this information in the product metadata, as used by zypper lifcycle and elsewhere. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-888=1 Package List: - openSUSE Leap 42.3 (x86_64): openSUSE-release-42.3-2.1 References: https://bugzilla.suse.com/1104362

1 0

openSUSE-SU-2018:2397-1: moderate: Security update for apache2
by opensuse-security＠opensuse.org 17 Aug '18

17 Aug '18

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2397-1 Rating: moderate References: #1101689 Cross-References: CVE-2018-1333 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for apache2 fixes the following issues: The following security vulnerability were fixed: - CVE-2018-1333: Fixed a worker exhaustion that could have lead to a denial of service via specially crafted HTTP/2 requests (bsc#1101689). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-893=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-2.4.23-25.1 apache2-debuginfo-2.4.23-25.1 apache2-debugsource-2.4.23-25.1 apache2-devel-2.4.23-25.1 apache2-event-2.4.23-25.1 apache2-event-debuginfo-2.4.23-25.1 apache2-example-pages-2.4.23-25.1 apache2-prefork-2.4.23-25.1 apache2-prefork-debuginfo-2.4.23-25.1 apache2-utils-2.4.23-25.1 apache2-utils-debuginfo-2.4.23-25.1 apache2-worker-2.4.23-25.1 apache2-worker-debuginfo-2.4.23-25.1 - openSUSE Leap 42.3 (noarch): apache2-doc-2.4.23-25.1 References: https://www.suse.com/security/cve/CVE-2018-1333.html https://bugzilla.suse.com/1101689

1 0

openSUSE-SU-2018:2396-1: important: Security update for samba
by opensuse-security＠opensuse.org 17 Aug '18

17 Aug '18

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2396-1 Rating: important References: #1067700 #1068059 #1087303 #1103411 Cross-References: CVE-2018-10858 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has three fixes is now available. Description: This update for samba fixes the following issues: The following security vulnerability was fixed: - CVE-2018-10858: Fixed insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); The following other change was made: - s3: winbind: Fix 'winbind normalize names' in wb_getpwsid(); - winbind: honor "winbind use default domain" with empty domain (bsc#1087303) - winbind: do not modify credentials in NTLM passthru (bsc#1068059) - net: fix net ads keytab handling (bsc#1067700) - fix vfs_ceph flock stub This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-890=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ctdb-4.6.14+git.157.c2d53c2b191-18.1 ctdb-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 ctdb-tests-4.6.14+git.157.c2d53c2b191-18.1 ctdb-tests-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 libdcerpc-binding0-4.6.14+git.157.c2d53c2b191-18.1 libdcerpc-binding0-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 libdcerpc-devel-4.6.14+git.157.c2d53c2b191-18.1 libdcerpc-samr-devel-4.6.14+git.157.c2d53c2b191-18.1 libdcerpc-samr0-4.6.14+git.157.c2d53c2b191-18.1 libdcerpc-samr0-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 libdcerpc0-4.6.14+git.157.c2d53c2b191-18.1 libdcerpc0-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 libndr-devel-4.6.14+git.157.c2d53c2b191-18.1 libndr-krb5pac-devel-4.6.14+git.157.c2d53c2b191-18.1 libndr-krb5pac0-4.6.14+git.157.c2d53c2b191-18.1 libndr-krb5pac0-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 libndr-nbt-devel-4.6.14+git.157.c2d53c2b191-18.1 libndr-nbt0-4.6.14+git.157.c2d53c2b191-18.1 libndr-nbt0-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 libndr-standard-devel-4.6.14+git.157.c2d53c2b191-18.1 libndr-standard0-4.6.14+git.157.c2d53c2b191-18.1 libndr-standard0-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 libndr0-4.6.14+git.157.c2d53c2b191-18.1 libndr0-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 libnetapi-devel-4.6.14+git.157.c2d53c2b191-18.1 libnetapi0-4.6.14+git.157.c2d53c2b191-18.1 libnetapi0-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 libsamba-credentials-devel-4.6.14+git.157.c2d53c2b191-18.1 libsamba-credentials0-4.6.14+git.157.c2d53c2b191-18.1 libsamba-credentials0-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 libsamba-errors-devel-4.6.14+git.157.c2d53c2b191-18.1 libsamba-errors0-4.6.14+git.157.c2d53c2b191-18.1 libsamba-errors0-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 libsamba-hostconfig-devel-4.6.14+git.157.c2d53c2b191-18.1 libsamba-hostconfig0-4.6.14+git.157.c2d53c2b191-18.1 libsamba-hostconfig0-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 libsamba-passdb-devel-4.6.14+git.157.c2d53c2b191-18.1 libsamba-passdb0-4.6.14+git.157.c2d53c2b191-18.1 libsamba-passdb0-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 libsamba-policy-devel-4.6.14+git.157.c2d53c2b191-18.1 libsamba-policy0-4.6.14+git.157.c2d53c2b191-18.1 libsamba-policy0-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 libsamba-util-devel-4.6.14+git.157.c2d53c2b191-18.1 libsamba-util0-4.6.14+git.157.c2d53c2b191-18.1 libsamba-util0-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 libsamdb-devel-4.6.14+git.157.c2d53c2b191-18.1 libsamdb0-4.6.14+git.157.c2d53c2b191-18.1 libsamdb0-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 libsmbclient-devel-4.6.14+git.157.c2d53c2b191-18.1 libsmbclient0-4.6.14+git.157.c2d53c2b191-18.1 libsmbclient0-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 libsmbconf-devel-4.6.14+git.157.c2d53c2b191-18.1 libsmbconf0-4.6.14+git.157.c2d53c2b191-18.1 libsmbconf0-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 libsmbldap-devel-4.6.14+git.157.c2d53c2b191-18.1 libsmbldap0-4.6.14+git.157.c2d53c2b191-18.1 libsmbldap0-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 libtevent-util-devel-4.6.14+git.157.c2d53c2b191-18.1 libtevent-util0-4.6.14+git.157.c2d53c2b191-18.1 libtevent-util0-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 libwbclient-devel-4.6.14+git.157.c2d53c2b191-18.1 libwbclient0-4.6.14+git.157.c2d53c2b191-18.1 libwbclient0-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 samba-4.6.14+git.157.c2d53c2b191-18.1 samba-client-4.6.14+git.157.c2d53c2b191-18.1 samba-client-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 samba-core-devel-4.6.14+git.157.c2d53c2b191-18.1 samba-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 samba-debugsource-4.6.14+git.157.c2d53c2b191-18.1 samba-libs-4.6.14+git.157.c2d53c2b191-18.1 samba-libs-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 samba-pidl-4.6.14+git.157.c2d53c2b191-18.1 samba-python-4.6.14+git.157.c2d53c2b191-18.1 samba-python-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 samba-test-4.6.14+git.157.c2d53c2b191-18.1 samba-test-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 samba-winbind-4.6.14+git.157.c2d53c2b191-18.1 samba-winbind-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 - openSUSE Leap 42.3 (x86_64): libdcerpc-binding0-32bit-4.6.14+git.157.c2d53c2b191-18.1 libdcerpc-binding0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-18.1 libdcerpc-samr0-32bit-4.6.14+git.157.c2d53c2b191-18.1 libdcerpc-samr0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-18.1 libdcerpc0-32bit-4.6.14+git.157.c2d53c2b191-18.1 libdcerpc0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-18.1 libndr-krb5pac0-32bit-4.6.14+git.157.c2d53c2b191-18.1 libndr-krb5pac0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-18.1 libndr-nbt0-32bit-4.6.14+git.157.c2d53c2b191-18.1 libndr-nbt0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-18.1 libndr-standard0-32bit-4.6.14+git.157.c2d53c2b191-18.1 libndr-standard0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-18.1 libndr0-32bit-4.6.14+git.157.c2d53c2b191-18.1 libndr0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-18.1 libnetapi0-32bit-4.6.14+git.157.c2d53c2b191-18.1 libnetapi0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-18.1 libsamba-credentials0-32bit-4.6.14+git.157.c2d53c2b191-18.1 libsamba-credentials0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-18.1 libsamba-errors0-32bit-4.6.14+git.157.c2d53c2b191-18.1 libsamba-errors0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-18.1 libsamba-hostconfig0-32bit-4.6.14+git.157.c2d53c2b191-18.1 libsamba-hostconfig0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-18.1 libsamba-passdb0-32bit-4.6.14+git.157.c2d53c2b191-18.1 libsamba-passdb0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-18.1 libsamba-policy0-32bit-4.6.14+git.157.c2d53c2b191-18.1 libsamba-policy0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-18.1 libsamba-util0-32bit-4.6.14+git.157.c2d53c2b191-18.1 libsamba-util0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-18.1 libsamdb0-32bit-4.6.14+git.157.c2d53c2b191-18.1 libsamdb0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-18.1 libsmbclient0-32bit-4.6.14+git.157.c2d53c2b191-18.1 libsmbclient0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-18.1 libsmbconf0-32bit-4.6.14+git.157.c2d53c2b191-18.1 libsmbconf0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-18.1 libsmbldap0-32bit-4.6.14+git.157.c2d53c2b191-18.1 libsmbldap0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-18.1 libtevent-util0-32bit-4.6.14+git.157.c2d53c2b191-18.1 libtevent-util0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-18.1 libwbclient0-32bit-4.6.14+git.157.c2d53c2b191-18.1 libwbclient0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-18.1 samba-ceph-4.6.14+git.157.c2d53c2b191-18.1 samba-ceph-debuginfo-4.6.14+git.157.c2d53c2b191-18.1 samba-client-32bit-4.6.14+git.157.c2d53c2b191-18.1 samba-client-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-18.1 samba-libs-32bit-4.6.14+git.157.c2d53c2b191-18.1 samba-libs-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-18.1 samba-winbind-32bit-4.6.14+git.157.c2d53c2b191-18.1 samba-winbind-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-18.1 - openSUSE Leap 42.3 (noarch): samba-doc-4.6.14+git.157.c2d53c2b191-18.1 References: https://www.suse.com/security/cve/CVE-2018-10858.html https://bugzilla.suse.com/1067700 https://bugzilla.suse.com/1068059 https://bugzilla.suse.com/1087303 https://bugzilla.suse.com/1103411

1 0

openSUSE-RU-2018:2377-1: moderate: Recommended update for kernel modules
by maintenance＠opensuse.org 16 Aug '18

16 Aug '18

openSUSE Recommended Update: Recommended update for kernel modules ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2377-1 Rating: moderate References: #1095148 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for various kernel modules fixes the following issues: - Avoid package dependency problems after kernel upgrades (boo#1095148) Kernel module packages from the following packages were rebuilt: bbswitch crash dpdk drbd hdjmod lttng-modules openafs pcfclock sysdig v4l2loopback vhba-kmp virtualbox xtables-addons Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-879=1 Package List: - openSUSE Leap 15.0 (x86_64): bbswitch-0.8-lp150.2.2.1 bbswitch-debugsource-0.8-lp150.2.2.1 bbswitch-kmp-default-0.8_k4.12.14_lp150.12.13-lp150.2.2.1 bbswitch-kmp-default-debuginfo-0.8_k4.12.14_lp150.12.13-lp150.2.2.1 crash-7.2.1-lp150.2.2.1 crash-debuginfo-7.2.1-lp150.2.2.1 crash-debugsource-7.2.1-lp150.2.2.1 crash-devel-7.2.1-lp150.2.2.1 crash-doc-7.2.1-lp150.2.2.1 crash-eppic-7.2.1-lp150.2.2.1 crash-eppic-debuginfo-7.2.1-lp150.2.2.1 crash-gcore-7.2.1-lp150.2.2.1 crash-gcore-debuginfo-7.2.1-lp150.2.2.1 crash-kmp-default-7.2.1_k4.12.14_lp150.12.13-lp150.2.2.1 crash-kmp-default-debuginfo-7.2.1_k4.12.14_lp150.12.13-lp150.2.2.1 dpdk-17.11.2-lp150.2.2.1 dpdk-debuginfo-17.11.2-lp150.2.2.1 dpdk-debugsource-17.11.2-lp150.2.2.1 dpdk-devel-17.11.2-lp150.2.2.1 dpdk-devel-debuginfo-17.11.2-lp150.2.2.1 dpdk-examples-17.11.2-lp150.2.2.1 dpdk-examples-debuginfo-17.11.2-lp150.2.2.1 dpdk-kmp-default-17.11.2_k4.12.14_lp150.12.13-lp150.2.2.1 dpdk-kmp-default-debuginfo-17.11.2_k4.12.14_lp150.12.13-lp150.2.2.1 dpdk-tools-17.11.2-lp150.2.2.1 dpdk-tools-debuginfo-17.11.2-lp150.2.2.1 drbd-9.0.13+git.b83ade31-lp150.2.2.1 drbd-debugsource-9.0.13+git.b83ade31-lp150.2.2.1 drbd-kmp-default-9.0.13+git.b83ade31_k4.12.14_lp150.12.13-lp150.2.2.1 drbd-kmp-default-debuginfo-9.0.13+git.b83ade31_k4.12.14_lp150.12.13-lp150.2.2.1 hdjmod-debugsource-1.28-lp150.3.2.1 hdjmod-kmp-default-1.28_k4.12.14_lp150.12.13-lp150.3.2.1 hdjmod-kmp-default-debuginfo-1.28_k4.12.14_lp150.12.13-lp150.3.2.1 libdpdk-17_11-0-17.11.2-lp150.2.2.1 libdpdk-17_11-0-debuginfo-17.11.2-lp150.2.2.1 lttng-modules-2.10.0-lp150.4.2.1 lttng-modules-debugsource-2.10.0-lp150.4.2.1 lttng-modules-kmp-default-2.10.0_k4.12.14_lp150.12.13-lp150.4.2.1 lttng-modules-kmp-default-debuginfo-2.10.0_k4.12.14_lp150.12.13-lp150.4.2.1 openafs-1.8.0-lp150.2.2.1 openafs-authlibs-1.8.0-lp150.2.2.1 openafs-authlibs-debuginfo-1.8.0-lp150.2.2.1 openafs-authlibs-devel-1.8.0-lp150.2.2.1 openafs-client-1.8.0-lp150.2.2.1 openafs-client-debuginfo-1.8.0-lp150.2.2.1 openafs-debuginfo-1.8.0-lp150.2.2.1 openafs-debugsource-1.8.0-lp150.2.2.1 openafs-devel-1.8.0-lp150.2.2.1 openafs-devel-debuginfo-1.8.0-lp150.2.2.1 openafs-fuse_client-1.8.0-lp150.2.2.1 openafs-fuse_client-debuginfo-1.8.0-lp150.2.2.1 openafs-kernel-source-1.8.0-lp150.2.2.1 openafs-kmp-default-1.8.0_k4.12.14_lp150.12.13-lp150.2.2.1 openafs-kmp-default-debuginfo-1.8.0_k4.12.14_lp150.12.13-lp150.2.2.1 openafs-server-1.8.0-lp150.2.2.1 openafs-server-debuginfo-1.8.0-lp150.2.2.1 pcfclock-0.44-lp150.2.2.1 pcfclock-debuginfo-0.44-lp150.2.2.1 pcfclock-debugsource-0.44-lp150.2.2.1 pcfclock-kmp-default-0.44_k4.12.14_lp150.12.13-lp150.2.2.1 pcfclock-kmp-default-debuginfo-0.44_k4.12.14_lp150.12.13-lp150.2.2.1 python3-virtualbox-5.2.16-lp150.4.11.1 python3-virtualbox-debuginfo-5.2.16-lp150.4.11.1 sysdig-0.20.0-lp150.3.2.1 sysdig-debuginfo-0.20.0-lp150.3.2.1 sysdig-debugsource-0.20.0-lp150.3.2.1 sysdig-kmp-default-0.20.0_k4.12.14_lp150.12.13-lp150.3.2.1 sysdig-kmp-default-debuginfo-0.20.0_k4.12.14_lp150.12.13-lp150.3.2.1 v4l2loopback-debugsource-0.11.0-lp150.2.2.1 v4l2loopback-kmp-default-0.11.0_k4.12.14_lp150.12.13-lp150.2.2.1 v4l2loopback-kmp-default-debuginfo-0.11.0_k4.12.14_lp150.12.13-lp150.2.2.1 v4l2loopback-utils-0.11.0-lp150.2.2.1 vhba-kmp-default-20170610_k4.12.14_lp150.12.13-lp150.2.2.1 vhba-kmp-default-debuginfo-20170610_k4.12.14_lp150.12.13-lp150.2.2.1 virtualbox-5.2.16-lp150.4.11.1 virtualbox-debuginfo-5.2.16-lp150.4.11.1 virtualbox-debugsource-5.2.16-lp150.4.11.1 virtualbox-devel-5.2.16-lp150.4.11.1 virtualbox-guest-kmp-default-5.2.16_k4.12.14_lp150.12.13-lp150.4.11.1 virtualbox-guest-kmp-default-debuginfo-5.2.16_k4.12.14_lp150.12.13-lp150.4.11.1 virtualbox-guest-tools-5.2.16-lp150.4.11.1 virtualbox-guest-tools-debuginfo-5.2.16-lp150.4.11.1 virtualbox-guest-x11-5.2.16-lp150.4.11.1 virtualbox-guest-x11-debuginfo-5.2.16-lp150.4.11.1 virtualbox-host-kmp-default-5.2.16_k4.12.14_lp150.12.13-lp150.4.11.1 virtualbox-host-kmp-default-debuginfo-5.2.16_k4.12.14_lp150.12.13-lp150.4.11.1 virtualbox-qt-5.2.16-lp150.4.11.1 virtualbox-qt-debuginfo-5.2.16-lp150.4.11.1 virtualbox-vnc-5.2.16-lp150.4.11.1 virtualbox-websrv-5.2.16-lp150.4.11.1 virtualbox-websrv-debuginfo-5.2.16-lp150.4.11.1 xtables-addons-2.14-lp150.3.2.1 xtables-addons-debuginfo-2.14-lp150.3.2.1 xtables-addons-kmp-default-2.14_k4.12.14_lp150.12.13-lp150.3.2.1 xtables-addons-kmp-default-debuginfo-2.14_k4.12.14_lp150.12.13-lp150.3.2.1 - openSUSE Leap 15.0 (noarch): dpdk-doc-17.11.2-lp150.2.2.1 virtualbox-guest-desktop-icons-5.2.16-lp150.4.11.1 virtualbox-guest-source-5.2.16-lp150.4.11.1 virtualbox-host-source-5.2.16-lp150.4.11.1 References: https://bugzilla.suse.com/1095148

1 0

openSUSE-SU-2018:2376-1: important: Security update for libheimdal
by opensuse-security＠opensuse.org 16 Aug '18

16 Aug '18

openSUSE Security Update: Security update for libheimdal ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2376-1 Rating: important References: #1047218 #1071675 #1084909 Cross-References: CVE-2017-17439 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for libheimdal to version 7.5.0 fixes the following issues: The following security vulnerability was fixed: - CVE-2017-17439: Fixed a remote denial of service vulnerability through which remote unauthenticated attackers were able to crash the KDC by sending a crafted UDP packet containing empty data fields for client name or realm (boo#1071675) The following other bugs were fixed: - Override the build date (boo#1047218) - Use constant hostname (boo#1084909) - Handle long input lines when reloading database dumps - In pre-forked mode, correctly clear the process ids of exited children, allowing new child processes to replace the old. - Fixed incorrect KDC response when no-cross realm TGT exists, allowing client requests to fail quickly rather than time out after trying to get a correct answer from each KDC. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-876=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libheimdal-7.5.0-9.1 libheimdal-debuginfo-7.5.0-9.1 libheimdal-debugsource-7.5.0-9.1 libheimdal-devel-7.5.0-9.1 References: https://www.suse.com/security/cve/CVE-2017-17439.html https://bugzilla.suse.com/1047218 https://bugzilla.suse.com/1071675 https://bugzilla.suse.com/1084909

1 0

openSUSE-SU-2018:2375-1: important: Security update for python-Django1
by opensuse-security＠opensuse.org 16 Aug '18

16 Aug '18

openSUSE Security Update: Security update for python-Django1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2375-1 Rating: important References: #1102680 Cross-References: CVE-2018-14574 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-Django1 to version 1.11.15 fixes the following issues: The following security vulnerability was fixed: - CVE-2018-14574: Fixed an open redirect possibility in CommonMiddleware (boo#1102680) The following other bugs were fixed: - Fixed WKBWriter.write() and write_hex() for empty polygons on GEOS 3.6.1+ - Fixed a regression where altering a field with a unique constraint may drop and rebuild more foreign keys than necessary - Fixed crashes in django.contrib.admindocs when a view is a callable object, such as django.contrib.syndication.views.Feed - Fixed a regression where QuerySet.values() or values_list() after combining an annotated and unannotated queryset with union(), difference(), or intersection() crashed due to mismatching columns Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-875=1 Package List: - openSUSE Leap 15.0 (noarch): python2-Django1-1.11.15-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-14574.html https://bugzilla.suse.com/1102680

1 0

openSUSE-SU-2018:2373-1: important: Security update for nemo-extensions
by opensuse-security＠opensuse.org 16 Aug '18

16 Aug '18

openSUSE Security Update: Security update for nemo-extensions ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2373-1 Rating: important References: #1084703 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for nemo-extensions fixes the following issues: The following security vulnerability was fixed: - Prevent unprivileged users from adding other users to sambashare (boo#1084703) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-874=1 Package List: - openSUSE Leap 15.0 (x86_64): nemo-extension-dropbox-3.6.0-lp150.2.3.1 nemo-extension-dropbox-debuginfo-3.6.0-lp150.2.3.1 nemo-extension-fileroller-3.6.0-lp150.2.3.1 nemo-extension-fileroller-debuginfo-3.6.0-lp150.2.3.1 nemo-extension-gtkhash-3.6.0-lp150.2.3.1 nemo-extension-gtkhash-debuginfo-3.6.0-lp150.2.3.1 nemo-extension-image-converter-3.6.0-lp150.2.3.1 nemo-extension-image-converter-debuginfo-3.6.0-lp150.2.3.1 nemo-extension-preview-3.6.0-lp150.2.3.1 nemo-extension-preview-debuginfo-3.6.0-lp150.2.3.1 nemo-extension-repairer-3.6.0-lp150.2.3.1 nemo-extension-repairer-debuginfo-3.6.0-lp150.2.3.1 nemo-extension-seahorse-3.6.0-lp150.2.3.1 nemo-extension-seahorse-debuginfo-3.6.0-lp150.2.3.1 nemo-extension-share-3.6.0-lp150.2.3.1 nemo-extension-share-debuginfo-3.6.0-lp150.2.3.1 nemo-extensions-debuginfo-3.6.0-lp150.2.3.1 nemo-extensions-debugsource-3.6.0-lp150.2.3.1 python-nemo-3.6.0-lp150.2.3.1 python-nemo-debuginfo-3.6.0-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): nemo-extension-audio-tab-3.6.0-lp150.2.3.1 nemo-extension-compare-3.6.0-lp150.2.3.1 nemo-extension-emblems-3.6.0-lp150.2.3.1 nemo-extension-pastebin-3.6.0-lp150.2.3.1 nemo-extension-rabbitvcs-3.6.0-lp150.2.3.1 nemo-extension-terminal-3.6.0-lp150.2.3.1 References: https://bugzilla.suse.com/1084703

1 0