December 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2019:2693-1: important: Security update for chromium
by opensuse-security＠opensuse.org 18 Dec '19

18 Dec '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2693-1 Rating: important References: #1157269 Cross-References: CVE-2019-13723 CVE-2019-13724 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for chromium to version 78.0.3904.108 fixes the following issues: - Chromium was updated to 78.0.3904.108 (boo#1157269) Security issues fixed: - CVE-2019-13723: Fixed a use-after-free in Bluetooth - CVE-2019-13724: Fixed an out of bounds access in Bluetooth This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2693=1 Package List: - openSUSE Backports SLE-15 (aarch64 x86_64): chromedriver-78.0.3904.108-bp150.255.1 chromium-78.0.3904.108-bp150.255.1 References: https://www.suse.com/security/cve/CVE-2019-13723.html https://www.suse.com/security/cve/CVE-2019-13724.html https://bugzilla.suse.com/1157269

1 0

openSUSE-RU-2019:2690-1: moderate: Recommended update for nss_ldap
by maintenance＠opensuse.org 16 Dec '19

16 Dec '19

openSUSE Recommended Update: Recommended update for nss_ldap ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2690-1 Rating: moderate References: #1154340 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for nss_ldap fixes the following issues: - Implement export for build to avoid INET6 failing in nss_ldap. (bsc#1154340) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2690=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): nss_ldap-265-lp151.4.3.1 nss_ldap-debuginfo-265-lp151.4.3.1 nss_ldap-debugsource-265-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): nss_ldap-32bit-265-lp151.4.3.1 nss_ldap-32bit-debuginfo-265-lp151.4.3.1 References: https://bugzilla.suse.com/1154340

1 0

openSUSE-RU-2019:2688-1: moderate: Recommended update for insserv-compat
by maintenance＠opensuse.org 16 Dec '19

16 Dec '19

openSUSE Recommended Update: Recommended update for insserv-compat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2688-1 Rating: moderate References: #1052837 #1133306 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for insserv-compat fixes the following issues: - Fix handling of start parameters. (bsc#1133306) - Remove unnecessary entry from configuration file. (bsc#1052837) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2688=1 Package List: - openSUSE Leap 15.1 (noarch): insserv-compat-0.1-lp151.4.3.1 References: https://bugzilla.suse.com/1052837 https://bugzilla.suse.com/1133306

1 0

openSUSE-SU-2019:2692-1: important: Security update for chromium
by opensuse-security＠opensuse.org 16 Dec '19

16 Dec '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2692-1 Rating: important References: #1158982 Cross-References: CVE-2019-13725 CVE-2019-13726 CVE-2019-13727 CVE-2019-13728 CVE-2019-13729 CVE-2019-13730 CVE-2019-13732 CVE-2019-13734 CVE-2019-13735 CVE-2019-13736 CVE-2019-13737 CVE-2019-13738 CVE-2019-13739 CVE-2019-13740 CVE-2019-13741 CVE-2019-13742 CVE-2019-13743 CVE-2019-13744 CVE-2019-13745 CVE-2019-13746 CVE-2019-13747 CVE-2019-13748 CVE-2019-13749 CVE-2019-13750 CVE-2019-13751 CVE-2019-13752 CVE-2019-13753 CVE-2019-13754 CVE-2019-13755 CVE-2019-13756 CVE-2019-13757 CVE-2019-13758 CVE-2019-13759 CVE-2019-13761 CVE-2019-13762 CVE-2019-13763 CVE-2019-13764 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 37 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium was updated to 79.0.3945.79 (boo#1158982) - CVE-2019-13725: Fixed a use after free in Bluetooth - CVE-2019-13726: Fixed a heap buffer overflow in password manager - CVE-2019-13727: Fixed an insufficient policy enforcement in WebSockets - CVE-2019-13728: Fixed an out of bounds write in V8 - CVE-2019-13729: Fixed a use after free in WebSockets - CVE-2019-13730: Fixed a type Confusion in V8 - CVE-2019-13732: Fixed a use after free in WebAudio - CVE-2019-13734: Fixed an out of bounds write in SQLite - CVE-2019-13735: Fixed an out of bounds write in V8 - CVE-2019-13764: Fixed a type Confusion in V8 - CVE-2019-13736: Fixed an integer overflow in PDFium - CVE-2019-13737: Fixed an insufficient policy enforcement in autocomplete - CVE-2019-13738: Fixed an insufficient policy enforcement in navigation - CVE-2019-13739: Fixed an incorrect security UI in Omnibox - CVE-2019-13740: Fixed an incorrect security UI in sharing - CVE-2019-13741: Fixed an insufficient validation of untrusted input in Blink - CVE-2019-13742: Fixed an incorrect security UI in Omnibox - CVE-2019-13743: Fixed an incorrect security UI in external protocol handling - CVE-2019-13744: Fixed an insufficient policy enforcement in cookies - CVE-2019-13745: Fixed an insufficient policy enforcement in audio - CVE-2019-13746: Fixed an insufficient policy enforcement in Omnibox - CVE-2019-13747: Fixed an uninitialized Use in rendering - CVE-2019-13748: Fixed an insufficient policy enforcement in developer tools - CVE-2019-13749: Fixed an incorrect security UI in Omnibox - CVE-2019-13750: Fixed an insufficient data validation in SQLite - CVE-2019-13751: Fixed an uninitialized Use in SQLite - CVE-2019-13752: Fixed an out of bounds read in SQLite - CVE-2019-13753: Fixed an out of bounds read in SQLite - CVE-2019-13754: Fixed an insufficient policy enforcement in extensions - CVE-2019-13755: Fixed an insufficient policy enforcement in extensions - CVE-2019-13756: Fixed an incorrect security UI in printing - CVE-2019-13757: Fixed an incorrect security UI in Omnibox - CVE-2019-13758: Fixed an insufficient policy enforcement in navigation - CVE-2019-13759: Fixed an incorrect security UI in interstitials - CVE-2019-13761: Fixed an incorrect security UI in Omnibox - CVE-2019-13762: Fixed an insufficient policy enforcement in downloads - CVE-2019-13763: Fixed an insufficient policy enforcement in payments Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2692=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2692=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-2692=1 Package List: - openSUSE Leap 15.1 (x86_64): chromedriver-79.0.3945.79-lp151.2.51.1 chromedriver-debuginfo-79.0.3945.79-lp151.2.51.1 chromium-79.0.3945.79-lp151.2.51.1 chromium-debuginfo-79.0.3945.79-lp151.2.51.1 chromium-debugsource-79.0.3945.79-lp151.2.51.1 - openSUSE Backports SLE-15 (aarch64 x86_64): chromedriver-79.0.3945.79-bp150.252.1 chromedriver-debuginfo-79.0.3945.79-bp150.252.1 chromium-79.0.3945.79-bp150.252.1 chromium-debuginfo-79.0.3945.79-bp150.252.1 chromium-debugsource-79.0.3945.79-bp150.252.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 x86_64): chromedriver-79.0.3945.79-19.1 chromedriver-debuginfo-79.0.3945.79-19.1 chromium-79.0.3945.79-19.1 chromium-debuginfo-79.0.3945.79-19.1 chromium-debugsource-79.0.3945.79-19.1 References: https://www.suse.com/security/cve/CVE-2019-13725.html https://www.suse.com/security/cve/CVE-2019-13726.html https://www.suse.com/security/cve/CVE-2019-13727.html https://www.suse.com/security/cve/CVE-2019-13728.html https://www.suse.com/security/cve/CVE-2019-13729.html https://www.suse.com/security/cve/CVE-2019-13730.html https://www.suse.com/security/cve/CVE-2019-13732.html https://www.suse.com/security/cve/CVE-2019-13734.html https://www.suse.com/security/cve/CVE-2019-13735.html https://www.suse.com/security/cve/CVE-2019-13736.html https://www.suse.com/security/cve/CVE-2019-13737.html https://www.suse.com/security/cve/CVE-2019-13738.html https://www.suse.com/security/cve/CVE-2019-13739.html https://www.suse.com/security/cve/CVE-2019-13740.html https://www.suse.com/security/cve/CVE-2019-13741.html https://www.suse.com/security/cve/CVE-2019-13742.html https://www.suse.com/security/cve/CVE-2019-13743.html https://www.suse.com/security/cve/CVE-2019-13744.html https://www.suse.com/security/cve/CVE-2019-13745.html https://www.suse.com/security/cve/CVE-2019-13746.html https://www.suse.com/security/cve/CVE-2019-13747.html https://www.suse.com/security/cve/CVE-2019-13748.html https://www.suse.com/security/cve/CVE-2019-13749.html https://www.suse.com/security/cve/CVE-2019-13750.html https://www.suse.com/security/cve/CVE-2019-13751.html https://www.suse.com/security/cve/CVE-2019-13752.html https://www.suse.com/security/cve/CVE-2019-13753.html https://www.suse.com/security/cve/CVE-2019-13754.html https://www.suse.com/security/cve/CVE-2019-13755.html https://www.suse.com/security/cve/CVE-2019-13756.html https://www.suse.com/security/cve/CVE-2019-13757.html https://www.suse.com/security/cve/CVE-2019-13758.html https://www.suse.com/security/cve/CVE-2019-13759.html https://www.suse.com/security/cve/CVE-2019-13761.html https://www.suse.com/security/cve/CVE-2019-13762.html https://www.suse.com/security/cve/CVE-2019-13763.html https://www.suse.com/security/cve/CVE-2019-13764.html https://bugzilla.suse.com/1158982

1 0

openSUSE-RU-2019:2691-1: moderate: Recommended update for krdc
by maintenance＠opensuse.org 16 Dec '19

16 Dec '19

openSUSE Recommended Update: Recommended update for krdc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2691-1 Rating: moderate References: #1135364 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for krdc fixes the following issues: - Add 0001-RDP-Warn-if-trying-to-share-a-non-existing-folder.patch to prevent silent connection errors if the shared folder doesn't exist (boo#1135364, kde#394551) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2691=1 Package List: - openSUSE Leap 15.1 (noarch): krdc-lang-18.12.3-lp151.2.7.1 - openSUSE Leap 15.1 (x86_64): krdc-18.12.3-lp151.2.7.1 krdc-debuginfo-18.12.3-lp151.2.7.1 krdc-debugsource-18.12.3-lp151.2.7.1 krdc-devel-18.12.3-lp151.2.7.1 References: https://bugzilla.suse.com/1135364

1 0

openSUSE-SU-2019:2689-1: important: Security update for libssh
by opensuse-security＠opensuse.org 16 Dec '19

16 Dec '19

openSUSE Security Update: Security update for libssh ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2689-1 Rating: important References: #1158095 Cross-References: CVE-2019-14889 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libssh fixes the following issues: - CVE-2019-14889: Fixed an arbitrary command execution (bsc#1158095). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2689=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libssh-debugsource-0.8.7-lp151.2.6.1 libssh-devel-0.8.7-lp151.2.6.1 libssh4-0.8.7-lp151.2.6.1 libssh4-debuginfo-0.8.7-lp151.2.6.1 - openSUSE Leap 15.1 (x86_64): libssh4-32bit-0.8.7-lp151.2.6.1 libssh4-32bit-debuginfo-0.8.7-lp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-14889.html https://bugzilla.suse.com/1158095

1 0

openSUSE-SU-2019:2692-1: important: Security update for chromium
by opensuse-security＠opensuse.org 16 Dec '19

16 Dec '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2692-1 Rating: important References: #1158982 Cross-References: CVE-2019-13725 CVE-2019-13726 CVE-2019-13727 CVE-2019-13728 CVE-2019-13729 CVE-2019-13730 CVE-2019-13732 CVE-2019-13734 CVE-2019-13735 CVE-2019-13736 CVE-2019-13737 CVE-2019-13738 CVE-2019-13739 CVE-2019-13740 CVE-2019-13741 CVE-2019-13742 CVE-2019-13743 CVE-2019-13744 CVE-2019-13745 CVE-2019-13746 CVE-2019-13747 CVE-2019-13748 CVE-2019-13749 CVE-2019-13750 CVE-2019-13751 CVE-2019-13752 CVE-2019-13753 CVE-2019-13754 CVE-2019-13755 CVE-2019-13756 CVE-2019-13757 CVE-2019-13758 CVE-2019-13759 CVE-2019-13761 CVE-2019-13762 CVE-2019-13763 CVE-2019-13764 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 37 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium was updated to 79.0.3945.79 (boo#1158982) - CVE-2019-13725: Fixed a use after free in Bluetooth - CVE-2019-13726: Fixed a heap buffer overflow in password manager - CVE-2019-13727: Fixed an insufficient policy enforcement in WebSockets - CVE-2019-13728: Fixed an out of bounds write in V8 - CVE-2019-13729: Fixed a use after free in WebSockets - CVE-2019-13730: Fixed a type Confusion in V8 - CVE-2019-13732: Fixed a use after free in WebAudio - CVE-2019-13734: Fixed an out of bounds write in SQLite - CVE-2019-13735: Fixed an out of bounds write in V8 - CVE-2019-13764: Fixed a type Confusion in V8 - CVE-2019-13736: Fixed an integer overflow in PDFium - CVE-2019-13737: Fixed an insufficient policy enforcement in autocomplete - CVE-2019-13738: Fixed an insufficient policy enforcement in navigation - CVE-2019-13739: Fixed an incorrect security UI in Omnibox - CVE-2019-13740: Fixed an incorrect security UI in sharing - CVE-2019-13741: Fixed an insufficient validation of untrusted input in Blink - CVE-2019-13742: Fixed an incorrect security UI in Omnibox - CVE-2019-13743: Fixed an incorrect security UI in external protocol handling - CVE-2019-13744: Fixed an insufficient policy enforcement in cookies - CVE-2019-13745: Fixed an insufficient policy enforcement in audio - CVE-2019-13746: Fixed an insufficient policy enforcement in Omnibox - CVE-2019-13747: Fixed an uninitialized Use in rendering - CVE-2019-13748: Fixed an insufficient policy enforcement in developer tools - CVE-2019-13749: Fixed an incorrect security UI in Omnibox - CVE-2019-13750: Fixed an insufficient data validation in SQLite - CVE-2019-13751: Fixed an uninitialized Use in SQLite - CVE-2019-13752: Fixed an out of bounds read in SQLite - CVE-2019-13753: Fixed an out of bounds read in SQLite - CVE-2019-13754: Fixed an insufficient policy enforcement in extensions - CVE-2019-13755: Fixed an insufficient policy enforcement in extensions - CVE-2019-13756: Fixed an incorrect security UI in printing - CVE-2019-13757: Fixed an incorrect security UI in Omnibox - CVE-2019-13758: Fixed an insufficient policy enforcement in navigation - CVE-2019-13759: Fixed an incorrect security UI in interstitials - CVE-2019-13761: Fixed an incorrect security UI in Omnibox - CVE-2019-13762: Fixed an insufficient policy enforcement in downloads - CVE-2019-13763: Fixed an insufficient policy enforcement in payments Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-2692=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 x86_64): chromedriver-79.0.3945.79-19.1 chromedriver-debuginfo-79.0.3945.79-19.1 chromium-79.0.3945.79-19.1 chromium-debuginfo-79.0.3945.79-19.1 chromium-debugsource-79.0.3945.79-19.1 References: https://www.suse.com/security/cve/CVE-2019-13725.html https://www.suse.com/security/cve/CVE-2019-13726.html https://www.suse.com/security/cve/CVE-2019-13727.html https://www.suse.com/security/cve/CVE-2019-13728.html https://www.suse.com/security/cve/CVE-2019-13729.html https://www.suse.com/security/cve/CVE-2019-13730.html https://www.suse.com/security/cve/CVE-2019-13732.html https://www.suse.com/security/cve/CVE-2019-13734.html https://www.suse.com/security/cve/CVE-2019-13735.html https://www.suse.com/security/cve/CVE-2019-13736.html https://www.suse.com/security/cve/CVE-2019-13737.html https://www.suse.com/security/cve/CVE-2019-13738.html https://www.suse.com/security/cve/CVE-2019-13739.html https://www.suse.com/security/cve/CVE-2019-13740.html https://www.suse.com/security/cve/CVE-2019-13741.html https://www.suse.com/security/cve/CVE-2019-13742.html https://www.suse.com/security/cve/CVE-2019-13743.html https://www.suse.com/security/cve/CVE-2019-13744.html https://www.suse.com/security/cve/CVE-2019-13745.html https://www.suse.com/security/cve/CVE-2019-13746.html https://www.suse.com/security/cve/CVE-2019-13747.html https://www.suse.com/security/cve/CVE-2019-13748.html https://www.suse.com/security/cve/CVE-2019-13749.html https://www.suse.com/security/cve/CVE-2019-13750.html https://www.suse.com/security/cve/CVE-2019-13751.html https://www.suse.com/security/cve/CVE-2019-13752.html https://www.suse.com/security/cve/CVE-2019-13753.html https://www.suse.com/security/cve/CVE-2019-13754.html https://www.suse.com/security/cve/CVE-2019-13755.html https://www.suse.com/security/cve/CVE-2019-13756.html https://www.suse.com/security/cve/CVE-2019-13757.html https://www.suse.com/security/cve/CVE-2019-13758.html https://www.suse.com/security/cve/CVE-2019-13759.html https://www.suse.com/security/cve/CVE-2019-13761.html https://www.suse.com/security/cve/CVE-2019-13762.html https://www.suse.com/security/cve/CVE-2019-13763.html https://www.suse.com/security/cve/CVE-2019-13764.html https://bugzilla.suse.com/1158982

1 0

openSUSE-SU-2019:2687-1: important: Security update for java-1_8_0-openjdk
by opensuse-security＠opensuse.org 15 Dec '19

15 Dec '19

openSUSE Security Update: Security update for java-1_8_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2687-1 Rating: important References: #1138529 #1152856 #1154212 Cross-References: CVE-2019-2894 CVE-2019-2933 CVE-2019-2945 CVE-2019-2949 CVE-2019-2958 CVE-2019-2962 CVE-2019-2964 CVE-2019-2973 CVE-2019-2975 CVE-2019-2978 CVE-2019-2981 CVE-2019-2983 CVE-2019-2987 CVE-2019-2988 CVE-2019-2989 CVE-2019-2992 CVE-2019-2999 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 17 vulnerabilities is now available. Description: This update for java-1_8_0-openjdk (jdk8u232/icedtea 3.14.0) fixes the following issues: Security issues fixed (bsc#1154212): - CVE-2019-2933: Windows file handling redux - CVE-2019-2945: Better socket support - CVE-2019-2949: Better Kerberos ccache handling - CVE-2019-2958: Build Better Processes - CVE-2019-2964: Better support for patterns - CVE-2019-2962: Better Glyph Images - CVE-2019-2973: Better pattern compilation - CVE-2019-2975: Unexpected exception in jjs - CVE-2019-2978: Improved handling of jar files - CVE-2019-2981: Better Path supports - CVE-2019-2983: Better serial attributes - CVE-2019-2987: Better rendering of native glyphs - CVE-2019-2988: Better Graphics2D drawing - CVE-2019-2989: Improve TLS connection support - CVE-2019-2992: Enhance font glyph mapping - CVE-2019-2999: Commentary on Javadoc comments - CVE-2019-2894: Enhance ECDSA operations (bsc#1152856) Bug fixes: - Fixed build failuers on ARM (bsc#1138529). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2687=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): java-1_8_0-openjdk-1.8.0.232-lp151.2.6.1 java-1_8_0-openjdk-accessibility-1.8.0.232-lp151.2.6.1 java-1_8_0-openjdk-debuginfo-1.8.0.232-lp151.2.6.1 java-1_8_0-openjdk-debugsource-1.8.0.232-lp151.2.6.1 java-1_8_0-openjdk-demo-1.8.0.232-lp151.2.6.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.232-lp151.2.6.1 java-1_8_0-openjdk-devel-1.8.0.232-lp151.2.6.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.232-lp151.2.6.1 java-1_8_0-openjdk-headless-1.8.0.232-lp151.2.6.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.232-lp151.2.6.1 java-1_8_0-openjdk-src-1.8.0.232-lp151.2.6.1 - openSUSE Leap 15.1 (noarch): java-1_8_0-openjdk-javadoc-1.8.0.232-lp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-2894.html https://www.suse.com/security/cve/CVE-2019-2933.html https://www.suse.com/security/cve/CVE-2019-2945.html https://www.suse.com/security/cve/CVE-2019-2949.html https://www.suse.com/security/cve/CVE-2019-2958.html https://www.suse.com/security/cve/CVE-2019-2962.html https://www.suse.com/security/cve/CVE-2019-2964.html https://www.suse.com/security/cve/CVE-2019-2973.html https://www.suse.com/security/cve/CVE-2019-2975.html https://www.suse.com/security/cve/CVE-2019-2978.html https://www.suse.com/security/cve/CVE-2019-2981.html https://www.suse.com/security/cve/CVE-2019-2983.html https://www.suse.com/security/cve/CVE-2019-2987.html https://www.suse.com/security/cve/CVE-2019-2988.html https://www.suse.com/security/cve/CVE-2019-2989.html https://www.suse.com/security/cve/CVE-2019-2992.html https://www.suse.com/security/cve/CVE-2019-2999.html https://bugzilla.suse.com/1138529 https://bugzilla.suse.com/1152856 https://bugzilla.suse.com/1154212

1 0

openSUSE-RU-2019:2686-1: moderate: Recommended update for ca-certificates-mozilla, p11-kit
by maintenance＠opensuse.org 15 Dec '19

15 Dec '19

openSUSE Recommended Update: Recommended update for ca-certificates-mozilla, p11-kit ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2686-1 Rating: moderate References: #1154871 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ca-certificates-mozilla, p11-kit fixes the following issues: Changes in ca-certificates-mozilla: - export correct p11kit trust attributes so Firefox detects built in certificates (bsc#1154871). Changes in p11-kit: - support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox detects built in certificates (bsc#1154871) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2686=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libp11-kit0-0.23.2-lp151.4.3.1 libp11-kit0-debuginfo-0.23.2-lp151.4.3.1 p11-kit-0.23.2-lp151.4.3.1 p11-kit-debuginfo-0.23.2-lp151.4.3.1 p11-kit-debugsource-0.23.2-lp151.4.3.1 p11-kit-devel-0.23.2-lp151.4.3.1 p11-kit-nss-trust-0.23.2-lp151.4.3.1 p11-kit-tools-0.23.2-lp151.4.3.1 p11-kit-tools-debuginfo-0.23.2-lp151.4.3.1 - openSUSE Leap 15.1 (noarch): ca-certificates-mozilla-2.34-lp151.2.6.1 - openSUSE Leap 15.1 (x86_64): libp11-kit0-32bit-0.23.2-lp151.4.3.1 libp11-kit0-32bit-debuginfo-0.23.2-lp151.4.3.1 p11-kit-32bit-0.23.2-lp151.4.3.1 p11-kit-32bit-debuginfo-0.23.2-lp151.4.3.1 p11-kit-nss-trust-32bit-0.23.2-lp151.4.3.1 References: https://bugzilla.suse.com/1154871

1 0

openSUSE-RU-2019:2683-1: moderate: Recommended update for rubygem-mail
by maintenance＠opensuse.org 15 Dec '19

15 Dec '19

openSUSE Recommended Update: Recommended update for rubygem-mail ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2683-1 Rating: moderate References: #1156721 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rubygem-mail fixes the following issues: Compatibility fixes: - Restore conversions for properly encoded non-binary emails. - Gracefully parse certain invalid Content-Type headers. (rafbm) Bug fixes: - Fix transfer encoding when message encoding is blank. (bsc#1156721) - Fix 7bit/base64 content transfer encoding mismatch. (bsc#1156721) - Fix UTF-8 attachment filename quoting. (bsc#1156721) - Fix 'delete_all' using a readonly IMAP connection. (bsc#1156721) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2683=1 Package List: - openSUSE Leap 15.1 (x86_64): ruby2.5-rubygem-mail-2.7.1-lp151.3.3.1 ruby2.5-rubygem-mail-doc-2.7.1-lp151.3.3.1 References: https://bugzilla.suse.com/1156721

1 0