February 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:0226-1: moderate: Recommended update for boost
by maintenance＠opensuse.org 21 Feb '19

21 Feb '19

openSUSE Recommended Update: Recommended update for boost ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0226-1 Rating: moderate References: #1089363 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for boost fixes the following issues: - Fixes build issues caused by the Boost.Context library. (bnc#1089363) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-226=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): boost-devel-1.54.0-16.4.1 libboost_atomic1_54_0-1.54.0-16.4.1 libboost_atomic1_54_0-debuginfo-1.54.0-16.4.1 libboost_chrono1_54_0-1.54.0-16.4.1 libboost_chrono1_54_0-debuginfo-1.54.0-16.4.1 libboost_context1_54_0-1.54.0-16.4.1 libboost_context1_54_0-debuginfo-1.54.0-16.4.1 libboost_date_time1_54_0-1.54.0-16.4.1 libboost_date_time1_54_0-debuginfo-1.54.0-16.4.1 libboost_filesystem1_54_0-1.54.0-16.4.1 libboost_filesystem1_54_0-debuginfo-1.54.0-16.4.1 libboost_graph1_54_0-1.54.0-16.4.1 libboost_graph1_54_0-debuginfo-1.54.0-16.4.1 libboost_graph_parallel1_54_0-1.54.0-16.4.1 libboost_graph_parallel1_54_0-debuginfo-1.54.0-16.4.1 libboost_iostreams1_54_0-1.54.0-16.4.1 libboost_iostreams1_54_0-debuginfo-1.54.0-16.4.1 libboost_locale1_54_0-1.54.0-16.4.1 libboost_locale1_54_0-debuginfo-1.54.0-16.4.1 libboost_log1_54_0-1.54.0-16.4.1 libboost_log1_54_0-debuginfo-1.54.0-16.4.1 libboost_math1_54_0-1.54.0-16.4.1 libboost_math1_54_0-debuginfo-1.54.0-16.4.1 libboost_mpi1_54_0-1.54.0-16.4.1 libboost_mpi1_54_0-debuginfo-1.54.0-16.4.1 libboost_program_options1_54_0-1.54.0-16.4.1 libboost_program_options1_54_0-debuginfo-1.54.0-16.4.1 libboost_python1_54_0-1.54.0-16.4.1 libboost_python1_54_0-debuginfo-1.54.0-16.4.1 libboost_random1_54_0-1.54.0-16.4.1 libboost_random1_54_0-debuginfo-1.54.0-16.4.1 libboost_regex1_54_0-1.54.0-16.4.1 libboost_regex1_54_0-debuginfo-1.54.0-16.4.1 libboost_serialization1_54_0-1.54.0-16.4.1 libboost_serialization1_54_0-debuginfo-1.54.0-16.4.1 libboost_signals1_54_0-1.54.0-16.4.1 libboost_signals1_54_0-debuginfo-1.54.0-16.4.1 libboost_system1_54_0-1.54.0-16.4.1 libboost_system1_54_0-debuginfo-1.54.0-16.4.1 libboost_test1_54_0-1.54.0-16.4.1 libboost_test1_54_0-debuginfo-1.54.0-16.4.1 libboost_thread1_54_0-1.54.0-16.4.1 libboost_thread1_54_0-debuginfo-1.54.0-16.4.1 libboost_timer1_54_0-1.54.0-16.4.1 libboost_timer1_54_0-debuginfo-1.54.0-16.4.1 libboost_wave1_54_0-1.54.0-16.4.1 libboost_wave1_54_0-debuginfo-1.54.0-16.4.1 - openSUSE Leap 42.3 (noarch): boost-doc-html-1.54.0-16.4.1 boost-doc-man-1.54.0-16.4.1 boost-doc-pdf-1.54.0-16.4.1 boost-license1_54_0-1.54.0-16.4.1 - openSUSE Leap 42.3 (x86_64): boost-devel-32bit-1.54.0-16.4.1 libboost_atomic1_54_0-32bit-1.54.0-16.4.1 libboost_atomic1_54_0-debuginfo-32bit-1.54.0-16.4.1 libboost_context1_54_0-32bit-1.54.0-16.4.1 libboost_context1_54_0-debuginfo-32bit-1.54.0-16.4.1 libboost_date_time1_54_0-32bit-1.54.0-16.4.1 libboost_date_time1_54_0-debuginfo-32bit-1.54.0-16.4.1 libboost_filesystem1_54_0-32bit-1.54.0-16.4.1 libboost_filesystem1_54_0-debuginfo-32bit-1.54.0-16.4.1 libboost_graph1_54_0-32bit-1.54.0-16.4.1 libboost_graph1_54_0-debuginfo-32bit-1.54.0-16.4.1 libboost_graph_parallel1_54_0-32bit-1.54.0-16.4.1 libboost_graph_parallel1_54_0-debuginfo-32bit-1.54.0-16.4.1 libboost_iostreams1_54_0-32bit-1.54.0-16.4.1 libboost_iostreams1_54_0-debuginfo-32bit-1.54.0-16.4.1 libboost_locale1_54_0-32bit-1.54.0-16.4.1 libboost_locale1_54_0-debuginfo-32bit-1.54.0-16.4.1 libboost_math1_54_0-32bit-1.54.0-16.4.1 libboost_math1_54_0-debuginfo-32bit-1.54.0-16.4.1 libboost_mpi1_54_0-32bit-1.54.0-16.4.1 libboost_mpi1_54_0-debuginfo-32bit-1.54.0-16.4.1 libboost_program_options1_54_0-32bit-1.54.0-16.4.1 libboost_program_options1_54_0-debuginfo-32bit-1.54.0-16.4.1 libboost_python1_54_0-32bit-1.54.0-16.4.1 libboost_python1_54_0-debuginfo-32bit-1.54.0-16.4.1 libboost_random1_54_0-32bit-1.54.0-16.4.1 libboost_random1_54_0-debuginfo-32bit-1.54.0-16.4.1 libboost_regex1_54_0-32bit-1.54.0-16.4.1 libboost_regex1_54_0-debuginfo-32bit-1.54.0-16.4.1 libboost_serialization1_54_0-32bit-1.54.0-16.4.1 libboost_serialization1_54_0-debuginfo-32bit-1.54.0-16.4.1 libboost_signals1_54_0-32bit-1.54.0-16.4.1 libboost_signals1_54_0-debuginfo-32bit-1.54.0-16.4.1 libboost_system1_54_0-32bit-1.54.0-16.4.1 libboost_system1_54_0-debuginfo-32bit-1.54.0-16.4.1 libboost_test1_54_0-32bit-1.54.0-16.4.1 libboost_test1_54_0-debuginfo-32bit-1.54.0-16.4.1 libboost_thread1_54_0-32bit-1.54.0-16.4.1 libboost_thread1_54_0-debuginfo-32bit-1.54.0-16.4.1 libboost_wave1_54_0-32bit-1.54.0-16.4.1 libboost_wave1_54_0-debuginfo-32bit-1.54.0-16.4.1 References: https://bugzilla.suse.com/1089363

1 0

openSUSE-RU-2019:0218-1: moderate: Recommended update for calamares
by maintenance＠opensuse.org 20 Feb '19

20 Feb '19

openSUSE Recommended Update: Recommended update for calamares ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0218-1 Rating: moderate References: #1124423 #1124451 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for calamares fixes the following issues: - Reflect the changed path to LiveOS read-only filesystem in KIWI-ng (KIWI 9) (boo#1124451). - BuildRequires libboost_python3-devel for Leap 15.0 and newer instead of boost-devel (boo#1124423, upstream issue 817). - Fix building for openSUSE Leap 42.3 by switching to GCC7. - Update to Calamares 3.1.11: - fix bug then some poorly-configured systems cannot reliably set the hardware clock (RTC). Previously this was an error which would abort the entire installation. Calamares now ignores the error. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-218=1 Package List: - openSUSE Leap 15.0 (noarch): calamares-branding-upstream-3.1.11-lp150.2.3.2 - openSUSE Leap 15.0 (x86_64): calamares-3.1.11-lp150.2.3.2 calamares-debuginfo-3.1.11-lp150.2.3.2 calamares-debugsource-3.1.11-lp150.2.3.2 calamares-webview-3.1.11-lp150.2.3.2 calamares-webview-debuginfo-3.1.11-lp150.2.3.2 References: https://bugzilla.suse.com/1124423 https://bugzilla.suse.com/1124451

1 0

openSUSE-RU-2019:0217-1: moderate: Recommended update for pcmanfm-qt
by maintenance＠opensuse.org 19 Feb '19

19 Feb '19

openSUSE Recommended Update: Recommended update for pcmanfm-qt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0217-1 Rating: moderate References: #1113767 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pcmanfm-qt fixes the following issues: - Add missing libfm dependency (boo#1113767) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-217=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): pcmanfm-qt-0.12.0-bp150.3.3.1 References: https://bugzilla.suse.com/1113767

1 0

openSUSE-RU-2019:0210-1: moderate: Recommended update for libdlm
by maintenance＠opensuse.org 19 Feb '19

19 Feb '19

openSUSE Recommended Update: Recommended update for libdlm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0210-1 Rating: moderate References: #1098449 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libdlm fixes the following issues: - Explicitly use and link libstonithd from libpacemaker3 (bsc#1098449) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-210=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libdlm-4.0.7-lp150.3.3.1 libdlm-debuginfo-4.0.7-lp150.3.3.1 libdlm-debugsource-4.0.7-lp150.3.3.1 libdlm-devel-4.0.7-lp150.3.3.1 libdlm3-4.0.7-lp150.3.3.1 libdlm3-debuginfo-4.0.7-lp150.3.3.1 References: https://bugzilla.suse.com/1098449

1 0

openSUSE-SU-2019:0215-1: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 19 Feb '19

19 Feb '19

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0215-1 Rating: low References: #1124366 Cross-References: CVE-2019-7397 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for GraphicsMagick fixes the following issues: Security issue fixed: - CVE-2019-7397: Fixed a Memory leak in function WritePDFImage in pdf.c (bsc#1124366) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-215=1 Package List: - openSUSE Leap 15.0 (x86_64): GraphicsMagick-1.3.29-lp150.3.21.1 GraphicsMagick-debuginfo-1.3.29-lp150.3.21.1 GraphicsMagick-debugsource-1.3.29-lp150.3.21.1 GraphicsMagick-devel-1.3.29-lp150.3.21.1 libGraphicsMagick++-Q16-12-1.3.29-lp150.3.21.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.29-lp150.3.21.1 libGraphicsMagick++-devel-1.3.29-lp150.3.21.1 libGraphicsMagick-Q16-3-1.3.29-lp150.3.21.1 libGraphicsMagick-Q16-3-debuginfo-1.3.29-lp150.3.21.1 libGraphicsMagick3-config-1.3.29-lp150.3.21.1 libGraphicsMagickWand-Q16-2-1.3.29-lp150.3.21.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.29-lp150.3.21.1 perl-GraphicsMagick-1.3.29-lp150.3.21.1 perl-GraphicsMagick-debuginfo-1.3.29-lp150.3.21.1 References: https://www.suse.com/security/cve/CVE-2019-7397.html https://bugzilla.suse.com/1124366

1 0

openSUSE-SU-2019:0212-1: moderate: Security update for pspp, spread-sheet-widget
by opensuse-security＠opensuse.org 19 Feb '19

19 Feb '19

openSUSE Security Update: Security update for pspp, spread-sheet-widget ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0212-1 Rating: moderate References: #1120061 Cross-References: CVE-2018-20230 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for pspp to version 1.2.0 fixes the following issues: Security issue fixed: - CVE-2018-20230: Fixed a heap-based buffer overflow in read_bytes_internal function that could lead to denial-of-service (bsc#1120061). Other bug fixes and changes: - Add upstream patch to avoid compiling with old Texinfo 4.13. - New experimental command SAVE DATA COLLECTION to save MDD files. - MTIME and YMDHMS variable formats now supported. - Spread sheet rendering now done via spread-sheet-widget. This update introduces a new package called spread-sheet-widget as dependency. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-212=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libspread-sheet-widget0-0.3-2.1 libspread-sheet-widget0-debuginfo-0.3-2.1 spread-sheet-widget-debugsource-0.3-2.1 spread-sheet-widget-devel-0.3-2.1 - openSUSE Leap 42.3 (x86_64): pspp-1.2.0-11.1 pspp-debuginfo-1.2.0-11.1 pspp-debugsource-1.2.0-11.1 pspp-devel-1.2.0-11.1 References: https://www.suse.com/security/cve/CVE-2018-20230.html https://bugzilla.suse.com/1120061

1 0

openSUSE-SU-2019:0214-1: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 19 Feb '19

19 Feb '19

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0214-1 Rating: low References: #1124366 Cross-References: CVE-2019-7397 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for GraphicsMagick fixes the following issues: Security issue fixed: - CVE-2019-7397: Fixed a Memory leak in WritePDFImage function in pdf.c (bsc#1124366). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-214=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): GraphicsMagick-1.3.25-126.1 GraphicsMagick-debuginfo-1.3.25-126.1 GraphicsMagick-debugsource-1.3.25-126.1 GraphicsMagick-devel-1.3.25-126.1 libGraphicsMagick++-Q16-12-1.3.25-126.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.25-126.1 libGraphicsMagick++-devel-1.3.25-126.1 libGraphicsMagick-Q16-3-1.3.25-126.1 libGraphicsMagick-Q16-3-debuginfo-1.3.25-126.1 libGraphicsMagick3-config-1.3.25-126.1 libGraphicsMagickWand-Q16-2-1.3.25-126.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.25-126.1 perl-GraphicsMagick-1.3.25-126.1 perl-GraphicsMagick-debuginfo-1.3.25-126.1 References: https://www.suse.com/security/cve/CVE-2019-7397.html https://bugzilla.suse.com/1124366

1 0

openSUSE-SU-2019:0208-1: important: Security update for runc
by opensuse-security＠opensuse.org 19 Feb '19

19 Feb '19

openSUSE Security Update: Security update for runc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0208-1 Rating: important References: #1095817 #1118897 #1118898 #1118899 #1121967 Cross-References: CVE-2018-16873 CVE-2018-16874 CVE-2018-16875 CVE-2019-5736 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves four vulnerabilities and has one errata is now available. Description: This update for runc fixes the following issues: Security vulnerablities addressed: - CVE-2019-5736: Effectively copying /proc/self/exe during re-exec to avoid write attacks to the host runc binary, which could lead to a container breakout (bsc#1121967) - CVE-2018-16873: Fix a remote command execution during "go get -u" (boo#1118897) - CVE-2018-16874: Fix a directory traversal in "go get" via curly braces in import paths (boo#1118898) - CVE-2018-16875: Fix a CPU denial of service issue (boo#1118899) Other changes and bug fixes: - Update go requirements to >= go1.10 - Create a symlink in /usr/bin/runc to enable rootless Podman and Buildah. - Make use of %license macro - Remove 'go test' from %check section, as it has only ever caused us problems and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke testing has been far more useful. (boo#1095817) - Upgrade to runc v1.0.0~rc6. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc6 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-208=1 Package List: - openSUSE Leap 15.0 (x86_64): runc-1.0.0~rc6-lp150.2.3.1 runc-debuginfo-1.0.0~rc6-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): runc-test-1.0.0~rc6-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-16873.html https://www.suse.com/security/cve/CVE-2018-16874.html https://www.suse.com/security/cve/CVE-2018-16875.html https://www.suse.com/security/cve/CVE-2019-5736.html https://bugzilla.suse.com/1095817 https://bugzilla.suse.com/1118897 https://bugzilla.suse.com/1118898 https://bugzilla.suse.com/1118899 https://bugzilla.suse.com/1121967

1 0

openSUSE-RU-2019:0213-1: moderate: Recommended update for sendmail
by maintenance＠opensuse.org 19 Feb '19

19 Feb '19

openSUSE Recommended Update: Recommended update for sendmail ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0213-1 Rating: moderate References: #1116675 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sendmail addresses the following issues: - Fixes an issue with symlink creation on package installation. In order for the wrong symlink to be removed, the service needs to be disabled and re-enabled. (bsc#1116675) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-213=1 Package List: - openSUSE Leap 15.0 (noarch): libmilter-doc-8.15.2-lp150.5.3.1 sendmail-starttls-8.15.2-lp150.5.3.1 - openSUSE Leap 15.0 (x86_64): libmilter1_0-8.15.2-lp150.5.3.1 libmilter1_0-debuginfo-8.15.2-lp150.5.3.1 rmail-8.15.2-lp150.5.3.1 rmail-debuginfo-8.15.2-lp150.5.3.1 sendmail-8.15.2-lp150.5.3.1 sendmail-debuginfo-8.15.2-lp150.5.3.1 sendmail-debugsource-8.15.2-lp150.5.3.1 sendmail-devel-8.15.2-lp150.5.3.1 References: https://bugzilla.suse.com/1116675

1 0

openSUSE-SU-2019:0216-1: important: Security update for chromium
by opensuse-security＠opensuse.org 19 Feb '19

19 Feb '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0216-1 Rating: important References: #1123641 #1124936 Cross-References: CVE-2019-5754 CVE-2019-5755 CVE-2019-5756 CVE-2019-5757 CVE-2019-5758 CVE-2019-5759 CVE-2019-5760 CVE-2019-5761 CVE-2019-5762 CVE-2019-5763 CVE-2019-5764 CVE-2019-5765 CVE-2019-5766 CVE-2019-5767 CVE-2019-5768 CVE-2019-5769 CVE-2019-5770 CVE-2019-5771 CVE-2019-5772 CVE-2019-5773 CVE-2019-5774 CVE-2019-5775 CVE-2019-5776 CVE-2019-5777 CVE-2019-5778 CVE-2019-5779 CVE-2019-5780 CVE-2019-5781 CVE-2019-5782 CVE-2019-5784 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes 30 vulnerabilities is now available. Description: This update for Chromium to version 72.0.3626.96 fixes the following issues: Security issues fixed (bsc#1123641 and bsc#1124936): - CVE-2019-5784: Inappropriate implementation in V8 - CVE-2019-5754: Inappropriate implementation in QUIC Networking. - CVE-2019-5782: Inappropriate implementation in V8. - CVE-2019-5755: Inappropriate implementation in V8. - CVE-2019-5756: Use after free in PDFium. - CVE-2019-5757: Type Confusion in SVG. - CVE-2019-5758: Use after free in Blink. - CVE-2019-5759: Use after free in HTML select elements. - CVE-2019-5760: Use after free in WebRTC. - CVE-2019-5761: Use after free in SwiftShader. - CVE-2019-5762: Use after free in PDFium. - CVE-2019-5763: Insufficient validation of untrusted input in V8. - CVE-2019-5764: Use after free in WebRTC. - CVE-2019-5765: Insufficient policy enforcement in the browser. - CVE-2019-5766: Insufficient policy enforcement in Canvas. - CVE-2019-5767: Incorrect security UI in WebAPKs. - CVE-2019-5768: Insufficient policy enforcement in DevTools. - CVE-2019-5769: Insufficient validation of untrusted input in Blink. - CVE-2019-5770: Heap buffer overflow in WebGL. - CVE-2019-5771: Heap buffer overflow in SwiftShader. - CVE-2019-5772: Use after free in PDFium. - CVE-2019-5773: Insufficient data validation in IndexedDB. - CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. - CVE-2019-5775: Insufficient policy enforcement in Omnibox. - CVE-2019-5776: Insufficient policy enforcement in Omnibox. - CVE-2019-5777: Insufficient policy enforcement in Omnibox. - CVE-2019-5778: Insufficient policy enforcement in Extensions. - CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. - CVE-2019-5780: Insufficient policy enforcement. - CVE-2019-5781: Insufficient policy enforcement in Omnibox. For a full list of changes refer to https://chromereleases.googleblog.com/2019/02/stable-channel-update-for-des ktop.html This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-216=1 Package List: - openSUSE Backports SLE-15 (aarch64 x86_64): chromedriver-72.0.3626.96-bp150.2.32.1 chromium-72.0.3626.96-bp150.2.32.1 References: https://www.suse.com/security/cve/CVE-2019-5754.html https://www.suse.com/security/cve/CVE-2019-5755.html https://www.suse.com/security/cve/CVE-2019-5756.html https://www.suse.com/security/cve/CVE-2019-5757.html https://www.suse.com/security/cve/CVE-2019-5758.html https://www.suse.com/security/cve/CVE-2019-5759.html https://www.suse.com/security/cve/CVE-2019-5760.html https://www.suse.com/security/cve/CVE-2019-5761.html https://www.suse.com/security/cve/CVE-2019-5762.html https://www.suse.com/security/cve/CVE-2019-5763.html https://www.suse.com/security/cve/CVE-2019-5764.html https://www.suse.com/security/cve/CVE-2019-5765.html https://www.suse.com/security/cve/CVE-2019-5766.html https://www.suse.com/security/cve/CVE-2019-5767.html https://www.suse.com/security/cve/CVE-2019-5768.html https://www.suse.com/security/cve/CVE-2019-5769.html https://www.suse.com/security/cve/CVE-2019-5770.html https://www.suse.com/security/cve/CVE-2019-5771.html https://www.suse.com/security/cve/CVE-2019-5772.html https://www.suse.com/security/cve/CVE-2019-5773.html https://www.suse.com/security/cve/CVE-2019-5774.html https://www.suse.com/security/cve/CVE-2019-5775.html https://www.suse.com/security/cve/CVE-2019-5776.html https://www.suse.com/security/cve/CVE-2019-5777.html https://www.suse.com/security/cve/CVE-2019-5778.html https://www.suse.com/security/cve/CVE-2019-5779.html https://www.suse.com/security/cve/CVE-2019-5780.html https://www.suse.com/security/cve/CVE-2019-5781.html https://www.suse.com/security/cve/CVE-2019-5782.html https://www.suse.com/security/cve/CVE-2019-5784.html https://bugzilla.suse.com/1123641 https://bugzilla.suse.com/1124936

1 0