February 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2019:0139-1: important: Security update for krb5
by opensuse-security＠opensuse.org 05 Feb '19

05 Feb '19

openSUSE Security Update: Security update for krb5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0139-1 Rating: important References: #1083926 #1083927 Cross-References: CVE-2018-5729 CVE-2018-5730 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for krb5 fixes the following issues: Security issues fixed: - CVE-2018-5729, CVE-2018-5730: Fixed multiple flaws in LDAP DN checking (bsc#1083926, bsc#1083927) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-139=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): krb5-1.15.2-lp150.5.6.1 krb5-client-1.15.2-lp150.5.6.1 krb5-client-debuginfo-1.15.2-lp150.5.6.1 krb5-debuginfo-1.15.2-lp150.5.6.1 krb5-debugsource-1.15.2-lp150.5.6.1 krb5-devel-1.15.2-lp150.5.6.1 krb5-mini-1.15.2-lp150.5.6.1 krb5-mini-debuginfo-1.15.2-lp150.5.6.1 krb5-mini-debugsource-1.15.2-lp150.5.6.1 krb5-mini-devel-1.15.2-lp150.5.6.1 krb5-plugin-kdb-ldap-1.15.2-lp150.5.6.1 krb5-plugin-kdb-ldap-debuginfo-1.15.2-lp150.5.6.1 krb5-plugin-preauth-otp-1.15.2-lp150.5.6.1 krb5-plugin-preauth-otp-debuginfo-1.15.2-lp150.5.6.1 krb5-plugin-preauth-pkinit-1.15.2-lp150.5.6.1 krb5-plugin-preauth-pkinit-debuginfo-1.15.2-lp150.5.6.1 krb5-server-1.15.2-lp150.5.6.1 krb5-server-debuginfo-1.15.2-lp150.5.6.1 - openSUSE Leap 15.0 (x86_64): krb5-32bit-1.15.2-lp150.5.6.1 krb5-32bit-debuginfo-1.15.2-lp150.5.6.1 krb5-devel-32bit-1.15.2-lp150.5.6.1 References: https://www.suse.com/security/cve/CVE-2018-5729.html https://www.suse.com/security/cve/CVE-2018-5730.html https://bugzilla.suse.com/1083926 https://bugzilla.suse.com/1083927

1 0

openSUSE-SU-2019:0138-1: important: Security update for mysql-community-server
by opensuse-security＠opensuse.org 05 Feb '19

05 Feb '19

openSUSE Security Update: Security update for mysql-community-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0138-1 Rating: important References: #1113652 #1122198 Cross-References: CVE-2018-0734 CVE-2019-2455 CVE-2019-2481 CVE-2019-2482 CVE-2019-2503 CVE-2019-2507 CVE-2019-2529 CVE-2019-2531 CVE-2019-2534 CVE-2019-2537 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for mysql-community-server to version 5.6.43 fixes the following issues: Security issues fixed: - CVE-2019-2534, CVE-2019-2529, CVE-2019-2482, CVE-2019-2455, CVE-2019-2503, CVE-2019-2537, CVE-2019-2481, CVE-2019-2507, CVE-2019-2531, CVE-2018-0734 (boo#1113652, boo#1122198) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-138=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libmysql56client18-5.6.43-45.1 libmysql56client18-debuginfo-5.6.43-45.1 libmysql56client_r18-5.6.43-45.1 mysql-community-server-5.6.43-45.1 mysql-community-server-bench-5.6.43-45.1 mysql-community-server-bench-debuginfo-5.6.43-45.1 mysql-community-server-client-5.6.43-45.1 mysql-community-server-client-debuginfo-5.6.43-45.1 mysql-community-server-debuginfo-5.6.43-45.1 mysql-community-server-debugsource-5.6.43-45.1 mysql-community-server-test-5.6.43-45.1 mysql-community-server-test-debuginfo-5.6.43-45.1 mysql-community-server-tools-5.6.43-45.1 mysql-community-server-tools-debuginfo-5.6.43-45.1 - openSUSE Leap 42.3 (x86_64): libmysql56client18-32bit-5.6.43-45.1 libmysql56client18-debuginfo-32bit-5.6.43-45.1 libmysql56client_r18-32bit-5.6.43-45.1 - openSUSE Leap 42.3 (noarch): mysql-community-server-errormessages-5.6.43-45.1 References: https://www.suse.com/security/cve/CVE-2018-0734.html https://www.suse.com/security/cve/CVE-2019-2455.html https://www.suse.com/security/cve/CVE-2019-2481.html https://www.suse.com/security/cve/CVE-2019-2482.html https://www.suse.com/security/cve/CVE-2019-2503.html https://www.suse.com/security/cve/CVE-2019-2507.html https://www.suse.com/security/cve/CVE-2019-2529.html https://www.suse.com/security/cve/CVE-2019-2531.html https://www.suse.com/security/cve/CVE-2019-2534.html https://www.suse.com/security/cve/CVE-2019-2537.html https://bugzilla.suse.com/1113652 https://bugzilla.suse.com/1122198

1 0

openSUSE-RU-2019:0136-1: moderate: Recommended update for rpm
by maintenance＠opensuse.org 05 Feb '19

05 Feb '19

openSUSE Recommended Update: Recommended update for rpm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0136-1 Rating: moderate References: Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for rpm fixes the following issues: - Add kmod(module) provides to kernel and KMPs (fate#326579). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-136=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): python-rpm-debugsource-4.14.1-lp150.9.9.1 python2-rpm-4.14.1-lp150.9.9.1 python2-rpm-debuginfo-4.14.1-lp150.9.9.1 python3-rpm-4.14.1-lp150.9.9.1 python3-rpm-debuginfo-4.14.1-lp150.9.9.1 rpm-4.14.1-lp150.9.9.1 rpm-build-4.14.1-lp150.9.9.1 rpm-build-debuginfo-4.14.1-lp150.9.9.1 rpm-debuginfo-4.14.1-lp150.9.9.1 rpm-debugsource-4.14.1-lp150.9.9.1 rpm-devel-4.14.1-lp150.9.9.1 - openSUSE Leap 15.0 (x86_64): rpm-32bit-4.14.1-lp150.9.9.1 rpm-32bit-debuginfo-4.14.1-lp150.9.9.1 References:

1 0

openSUSE-RU-2019:0137-1: moderate: Recommended update for gstreamer-plugins-bad
by maintenance＠opensuse.org 05 Feb '19

05 Feb '19

openSUSE Recommended Update: Recommended update for gstreamer-plugins-bad ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0137-1 Rating: moderate References: #1120299 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gstreamer-plugins-bad fixes the following issues: - Fixes for compatibility with libfdk-aac 2.0.0 (bsc#1120299) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-137=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): gstreamer-plugins-bad-1.12.5-lp150.2.3.1 gstreamer-plugins-bad-chromaprint-1.12.5-lp150.2.3.1 gstreamer-plugins-bad-chromaprint-debuginfo-1.12.5-lp150.2.3.1 gstreamer-plugins-bad-debuginfo-1.12.5-lp150.2.3.1 gstreamer-plugins-bad-debugsource-1.12.5-lp150.2.3.1 gstreamer-plugins-bad-devel-1.12.5-lp150.2.3.1 gstreamer-plugins-bad-doc-1.12.5-lp150.2.3.1 gstreamer-plugins-bad-fluidsynth-1.12.5-lp150.2.3.1 gstreamer-plugins-bad-fluidsynth-debuginfo-1.12.5-lp150.2.3.1 libgstadaptivedemux-1_0-0-1.12.5-lp150.2.3.1 libgstadaptivedemux-1_0-0-debuginfo-1.12.5-lp150.2.3.1 libgstbadallocators-1_0-0-1.12.5-lp150.2.3.1 libgstbadallocators-1_0-0-debuginfo-1.12.5-lp150.2.3.1 libgstbadaudio-1_0-0-1.12.5-lp150.2.3.1 libgstbadaudio-1_0-0-debuginfo-1.12.5-lp150.2.3.1 libgstbadbase-1_0-0-1.12.5-lp150.2.3.1 libgstbadbase-1_0-0-debuginfo-1.12.5-lp150.2.3.1 libgstbadvideo-1_0-0-1.12.5-lp150.2.3.1 libgstbadvideo-1_0-0-debuginfo-1.12.5-lp150.2.3.1 libgstbasecamerabinsrc-1_0-0-1.12.5-lp150.2.3.1 libgstbasecamerabinsrc-1_0-0-debuginfo-1.12.5-lp150.2.3.1 libgstcodecparsers-1_0-0-1.12.5-lp150.2.3.1 libgstcodecparsers-1_0-0-debuginfo-1.12.5-lp150.2.3.1 libgstgl-1_0-0-1.12.5-lp150.2.3.1 libgstgl-1_0-0-debuginfo-1.12.5-lp150.2.3.1 libgstinsertbin-1_0-0-1.12.5-lp150.2.3.1 libgstinsertbin-1_0-0-debuginfo-1.12.5-lp150.2.3.1 libgstmpegts-1_0-0-1.12.5-lp150.2.3.1 libgstmpegts-1_0-0-debuginfo-1.12.5-lp150.2.3.1 libgstphotography-1_0-0-1.12.5-lp150.2.3.1 libgstphotography-1_0-0-debuginfo-1.12.5-lp150.2.3.1 libgstplayer-1_0-0-1.12.5-lp150.2.3.1 libgstplayer-1_0-0-debuginfo-1.12.5-lp150.2.3.1 libgsturidownloader-1_0-0-1.12.5-lp150.2.3.1 libgsturidownloader-1_0-0-debuginfo-1.12.5-lp150.2.3.1 libgstvdpau-1.12.5-lp150.2.3.1 libgstvdpau-debuginfo-1.12.5-lp150.2.3.1 libgstwayland-1_0-0-1.12.5-lp150.2.3.1 libgstwayland-1_0-0-debuginfo-1.12.5-lp150.2.3.1 typelib-1_0-GstBadAllocators-1_0-1.12.5-lp150.2.3.1 typelib-1_0-GstGL-1_0-1.12.5-lp150.2.3.1 typelib-1_0-GstInsertBin-1_0-1.12.5-lp150.2.3.1 typelib-1_0-GstMpegts-1_0-1.12.5-lp150.2.3.1 typelib-1_0-GstPlayer-1_0-1.12.5-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): gstreamer-plugins-bad-lang-1.12.5-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): gstreamer-plugins-bad-32bit-1.12.5-lp150.2.3.1 gstreamer-plugins-bad-32bit-debuginfo-1.12.5-lp150.2.3.1 gstreamer-plugins-bad-chromaprint-32bit-1.12.5-lp150.2.3.1 gstreamer-plugins-bad-chromaprint-32bit-debuginfo-1.12.5-lp150.2.3.1 gstreamer-plugins-bad-fluidsynth-32bit-1.12.5-lp150.2.3.1 gstreamer-plugins-bad-fluidsynth-32bit-debuginfo-1.12.5-lp150.2.3.1 libgstadaptivedemux-1_0-0-32bit-1.12.5-lp150.2.3.1 libgstadaptivedemux-1_0-0-32bit-debuginfo-1.12.5-lp150.2.3.1 libgstbadaudio-1_0-0-32bit-1.12.5-lp150.2.3.1 libgstbadaudio-1_0-0-32bit-debuginfo-1.12.5-lp150.2.3.1 libgstbadbase-1_0-0-32bit-1.12.5-lp150.2.3.1 libgstbadbase-1_0-0-32bit-debuginfo-1.12.5-lp150.2.3.1 libgstbadvideo-1_0-0-32bit-1.12.5-lp150.2.3.1 libgstbadvideo-1_0-0-32bit-debuginfo-1.12.5-lp150.2.3.1 libgstbasecamerabinsrc-1_0-0-32bit-1.12.5-lp150.2.3.1 libgstbasecamerabinsrc-1_0-0-32bit-debuginfo-1.12.5-lp150.2.3.1 libgstcodecparsers-1_0-0-32bit-1.12.5-lp150.2.3.1 libgstcodecparsers-1_0-0-32bit-debuginfo-1.12.5-lp150.2.3.1 libgstgl-1_0-0-32bit-1.12.5-lp150.2.3.1 libgstgl-1_0-0-32bit-debuginfo-1.12.5-lp150.2.3.1 libgstinsertbin-1_0-0-32bit-1.12.5-lp150.2.3.1 libgstinsertbin-1_0-0-32bit-debuginfo-1.12.5-lp150.2.3.1 libgstmpegts-1_0-0-32bit-1.12.5-lp150.2.3.1 libgstmpegts-1_0-0-32bit-debuginfo-1.12.5-lp150.2.3.1 libgstphotography-1_0-0-32bit-1.12.5-lp150.2.3.1 libgstphotography-1_0-0-32bit-debuginfo-1.12.5-lp150.2.3.1 libgstplayer-1_0-0-32bit-1.12.5-lp150.2.3.1 libgstplayer-1_0-0-32bit-debuginfo-1.12.5-lp150.2.3.1 libgsturidownloader-1_0-0-32bit-1.12.5-lp150.2.3.1 libgsturidownloader-1_0-0-32bit-debuginfo-1.12.5-lp150.2.3.1 libgstvdpau-32bit-1.12.5-lp150.2.3.1 libgstvdpau-32bit-debuginfo-1.12.5-lp150.2.3.1 libgstwayland-1_0-0-32bit-1.12.5-lp150.2.3.1 libgstwayland-1_0-0-32bit-debuginfo-1.12.5-lp150.2.3.1 References: https://bugzilla.suse.com/1120299

1 0

openSUSE-RU-2019:0135-1: moderate: Recommended update for wodim
by maintenance＠opensuse.org 05 Feb '19

05 Feb '19

openSUSE Recommended Update: Recommended update for wodim ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0135-1 Rating: moderate References: #1100466 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for wodim fixes the following issues: - Fixing a crash when option "-T" is used in conjunction with files larger than 4GB. (bsc#1100466) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-135=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): cdrkit-cdrtools-compat-1.1.11-25.3.1 cdrkit-devel-static-1.1.11-25.3.1 genisoimage-1.1.11-25.3.1 genisoimage-debuginfo-1.1.11-25.3.1 icedax-1.1.11-25.3.1 icedax-debuginfo-1.1.11-25.3.1 wodim-1.1.11-25.3.1 wodim-debuginfo-1.1.11-25.3.1 wodim-debugsource-1.1.11-25.3.1 References: https://bugzilla.suse.com/1100466

1 0

openSUSE-RU-2019:0134-1: moderate: Recommended update for discord
by maintenance＠opensuse.org 05 Feb '19

05 Feb '19

openSUSE Recommended Update: Recommended update for discord ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0134-1 Rating: moderate References: Affected Products: openSUSE Leap 15.0:NonFree ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for discord fixes the following issues: Discord was updated to version 0.0.8. - Update to version ffmpeg 4.0.1 - added symbolic link to fix missing icon in some environments Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0:NonFree: zypper in -t patch openSUSE-2019-134=1 Package List: - openSUSE Leap 15.0:NonFree (x86_64): discord-0.0.8-lp150.2.3.1 discord-debuginfo-0.0.8-lp150.2.3.1 References:

1 0

openSUSE-SU-2019:0132-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 04 Feb '19

04 Feb '19

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0132-1 Rating: important References: #1122983 Cross-References: CVE-2018-18500 CVE-2018-18501 CVE-2018-18505 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for MozillaFirefox to version 60.5.0esr fixes the following issues: Security issues fixed: - CVE-2018-18500: Fixed a use-after-free parsing HTML5 stream (boo#1122983). - CVE-2018-18505: Fixed a privilege escalation through IPC channel messages (boo#1122983). - CVE-2018-18501: Fixed multiple memory safety bugs (boo#1122983). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-132=1 Package List: - openSUSE Leap 15.0 (x86_64): MozillaFirefox-60.5.0-lp150.3.36.1 MozillaFirefox-branding-upstream-60.5.0-lp150.3.36.1 MozillaFirefox-buildsymbols-60.5.0-lp150.3.36.1 MozillaFirefox-debuginfo-60.5.0-lp150.3.36.1 MozillaFirefox-debugsource-60.5.0-lp150.3.36.1 MozillaFirefox-devel-60.5.0-lp150.3.36.1 MozillaFirefox-translations-common-60.5.0-lp150.3.36.1 MozillaFirefox-translations-other-60.5.0-lp150.3.36.1 References: https://www.suse.com/security/cve/CVE-2018-18500.html https://www.suse.com/security/cve/CVE-2018-18501.html https://www.suse.com/security/cve/CVE-2018-18505.html https://bugzilla.suse.com/1122983

1 0

openSUSE-SU-2019:0133-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 04 Feb '19

04 Feb '19

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0133-1 Rating: important References: #1121255 #1122983 Cross-References: CVE-2018-18500 CVE-2018-18501 CVE-2018-18505 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for MozillaFirefox, mozilla-nss fixes the following issues: Security issues fixed: - CVE-2018-18500: Fixed a use-after-free parsing HTML5 stream (boo#1122983). - CVE-2018-18505: Fixed a privilege escalation through IPC channel messages (boo#1122983). - CVE-2018-18501: Fixed multiple memory safety bugs (boo#1122983). Non-security issue fixed: - Update mozilla-nss to version 3.36.7 as build dependency. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-133=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libfreebl3-3.36.7-57.1 libfreebl3-debuginfo-3.36.7-57.1 libsoftokn3-3.36.7-57.1 libsoftokn3-debuginfo-3.36.7-57.1 mozilla-nss-3.36.7-57.1 mozilla-nss-certs-3.36.7-57.1 mozilla-nss-certs-debuginfo-3.36.7-57.1 mozilla-nss-debuginfo-3.36.7-57.1 mozilla-nss-debugsource-3.36.7-57.1 mozilla-nss-devel-3.36.7-57.1 mozilla-nss-sysinit-3.36.7-57.1 mozilla-nss-sysinit-debuginfo-3.36.7-57.1 mozilla-nss-tools-3.36.7-57.1 mozilla-nss-tools-debuginfo-3.36.7-57.1 - openSUSE Leap 42.3 (x86_64): MozillaFirefox-60.5.0-128.1 MozillaFirefox-branding-upstream-60.5.0-128.1 MozillaFirefox-buildsymbols-60.5.0-128.1 MozillaFirefox-debuginfo-60.5.0-128.1 MozillaFirefox-debugsource-60.5.0-128.1 MozillaFirefox-devel-60.5.0-128.1 MozillaFirefox-translations-common-60.5.0-128.1 MozillaFirefox-translations-other-60.5.0-128.1 libfreebl3-32bit-3.36.7-57.1 libfreebl3-debuginfo-32bit-3.36.7-57.1 libsoftokn3-32bit-3.36.7-57.1 libsoftokn3-debuginfo-32bit-3.36.7-57.1 mozilla-nss-32bit-3.36.7-57.1 mozilla-nss-certs-32bit-3.36.7-57.1 mozilla-nss-certs-debuginfo-32bit-3.36.7-57.1 mozilla-nss-debuginfo-32bit-3.36.7-57.1 mozilla-nss-sysinit-32bit-3.36.7-57.1 mozilla-nss-sysinit-debuginfo-32bit-3.36.7-57.1 References: https://www.suse.com/security/cve/CVE-2018-18500.html https://www.suse.com/security/cve/CVE-2018-18501.html https://www.suse.com/security/cve/CVE-2018-18505.html https://bugzilla.suse.com/1121255 https://bugzilla.suse.com/1122983

1 0

openSUSE-RU-2019:0130-1: Recommended update for php7-smbclient
by maintenance＠opensuse.org 04 Feb '19

04 Feb '19

openSUSE Recommended Update: Recommended update for php7-smbclient ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0130-1 Rating: low References: #1123503 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for php7-smbclient fixes the following issues: - Update to new version 1.0.0 (boo#1123503) * stream optimization: reuse previous connections (Remi) * zend_strings are to be zend_string_release()'ed not efree()'ed. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-130=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): php7-smbclient-1.0.0-6.1 References: https://bugzilla.suse.com/1123503

1 0

openSUSE-SU-2019:0131-1: moderate: Security update for pdns-recursor
by opensuse-security＠opensuse.org 04 Feb '19

04 Feb '19

openSUSE Security Update: Security update for pdns-recursor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0131-1 Rating: moderate References: #1121887 #1121889 Cross-References: CVE-2019-3806 CVE-2019-3807 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for pdns-recursor to version 4.1.10 fixes the following issues: Security issues fixed: - CVE-2019-3806: Fixed a case when Lua hooks are not called over TCP (boo#1121887) - CVE-2019-3807: Fixed an issue where DNSSEC validation was not performed for AA=0 responses (boo#1121889) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-131=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): pdns-recursor-4.1.10-16.1 References: https://www.suse.com/security/cve/CVE-2019-3806.html https://www.suse.com/security/cve/CVE-2019-3807.html https://bugzilla.suse.com/1121887 https://bugzilla.suse.com/1121889

1 0