August 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2019:1920-1: important: Security update for dosbox
by opensuse-security＠opensuse.org 15 Aug '19

15 Aug '19

openSUSE Security Update: Security update for dosbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1920-1 Rating: important References: #1140254 Cross-References: CVE-2019-12594 CVE-2019-7165 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for dosbox fixes the following issues: Security issues fixed: - CVE-2019-7165: Fixed that a very long line inside a bat file would overflow the parsing buffer (bnc#1140254). - CVE-2019-12594: Added a basic permission system so that a program running inside DOSBox can't access the contents of /proc (e.g. /proc/self/mem) when / or /proc were (to be) mounted (bnc#1140254). - Several other fixes for out of bounds access and buffer overflows. This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-1920=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): dosbox-0.74.3-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-12594.html https://www.suse.com/security/cve/CVE-2019-7165.html https://bugzilla.suse.com/1140254

1 0

openSUSE-RU-2019:1919-1: moderate: Recommended update for opera
by maintenance＠opensuse.org 15 Aug '19

15 Aug '19

openSUSE Recommended Update: Recommended update for opera ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1919-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1:NonFree openSUSE Leap 15.0:NonFree ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for opera fixes the following issues: opera was updated to version 62.0.3331.116: - CHR-7498 Update chromium on desktop-stable-75-3331 to 75.0.3770.142 - DNA-78224 Sidebar buttons for internal pages not working on internal pages - DNA-78291 [Mac] Unable to move detached developer tool window - DNA-78385 [MacOS] Pinned communicators are not visible in full-screen mode - DNA-78502 Reload page button on toolbar doesn’t work on Mac - DNA-79274 No warning notification on quitting Opera with multiple tabs open after update - DNA-79753 Bookmark manager doesn’t open in private mode - DNA-79882 Control search box styling dynamically - DNA-80009 Use lowercase for search country matching Update to version to 62.0.3331.99: - DNA-78392 [Mac] Crash when trying to change theme in easy setup - DNA-79205 [Mac] Dev tools in separate window – the bottom of the page isn’t visible - DNA-79391 Show Easy Setup panel with API from welcome/upgrade page - DNA-79434 Crash at opera::BrowserSidebarErrorPage::BrowserSidebarErrorPage(content::WebContent s*, Browser*, GURL const&) - DNA-79456 Revert removing BB for new users - DNA-79489 [Mac] “Show warning before quitting with ⌘Q” flag is disabled after browser restart Update to version to 62.0.3331.66: - DNA-77821 Parse the specification file - DNA-77946 Create the hints service – update & read the hint specification file from the profile - DNA-78342 Crash at opera::BrowserSidebarErrorPage::~BrowserSidebarErrorPage() - DNA-79178 Crypto Wallet welcome/pairing page – string modification - DNA-79229 Translation: Crypto Wallet welcome/pairing page – string modification [PL, DE, RU] Update to version 62.0.3331.43: - CHR-7446 Update chromium on desktop-stable-75-3331 to 75.0.3770.100 - DNA-78285 [Mac] Dragging URL from Address Field to Bookmarks Bar Freezes Opera - DNA-78290 Adapt CryptoWallet welcome / pairing page to Opera Touch for iOS - DNA-78557 [Linux] OSCrypt is not initialized before being used in crypto wallet - DNA-78575 [Win7] Arrows are not visible - DNA-78921 Allow to use ES imports on Settings page - DNA-78983 columns misaligned in the Manage Search Engines in the opera://settings - DNA-79014 Folder blinks when selecting different folders in opera://bookmarks - DNA-79076 Enable #crypto-wallet-ios-instructions on O62 - DNA-79081 [Mac] Adding/removing elements from sidebar makes it broken - DNA-79175 Update tools/clang/scripts/update.py to version from M76 Update to version 62.0.3331.18: - DNA-78204 Unable to run Opera again after closing it with snapshot opened - DNA-79036 Promote O62 to stable - Complete Opera 62.0 changelog at: https://blogs.opera.com/desktop/changelog-for-62/ Update to version 60.0.3255.170: - DNA-77132 [Mac] Highlight visible when closing a tab - DNA-77356 [Mac] Tabs hovered state doesn’t go away - DNA-77676 [Mac] Hover state stays after closing tab - DNA-77858 News section display a tiny part of an article image - DNA-77962 Zombie received -currentTab - DNA-78285 [Mac] Dragging URL from Address Field to Bookmarks Bar Freezes Opera - DNA-78395 Add browser test covering this feature Update to version 60.0.3255.151: - DNA-77160 [Dark] Extension bar in dark theme - DNA-77290 [mac mojave] not possible to minimize Opera if it’s inactive application - DNA-77522 Add “Use bigger tiles” option to Settings page - DNA-77917 [Mac] Tab views get leaked - DNA-78279 Options for personal news in settings are missing - DNA-78346 Crash at service_manager::Main(service_manager::MainParams const&) - DNA-78362 ‘Check failed: mtime_result’ during desktop_common_unittests Update to version 60.0.3255.109: - DNA-78037 Crash at base::Time::Explode(bool, base::Time::Exploded*) - DNA-77416 Layout doesn’t align well when dynamically changing tile size - DNA-77466 Cancel button for not now context menu - DNA-77558 Create browser tests - DNA-77745 [Mac] Maximized Opera window expands after watching a video in fullscreen - DNA-78037 Crash at base::Time::Explode(bool, base::Time::Exploded*) - DNA-78085 Uncaught exception in background worker - DNA-78114 Update schema version on desktop-stable-73-3255 Update to version 60.0.3255.95: - DNA-76715 [Mac] Unable to open context menu with ctrl + click on inactive tab - DNA-76725 Highlight of elements differ between Omenu and Tabmenu - DNA-76820 RulesCacheTest.ShouldDownloadNotExistingRules is flaky - DNA-76933 Crash at views::Widget::CloseWithReason (views::Widget::ClosedReason) - DNA-77431 [Mac] Favicon of active tab “moves” when opening new tab - DNA-77702 Default startpage wallpaper renders very slowly if you don’t have hardware acceleration - DNA-77963 Crash at base::Value::GetDouble() Update to version 60.0.3255.70: - DNA-75464 Crash at base:Time::Explode - DNA-769O9 Crash at views::BridgedNativeWidgetlmpl - DNA-76938 Rate Opera - black text/gray background - DNA-77341 Extensions action should be hidden in overflow menu - DNA-77346 Use bigger tiles after update to R3 - DNA-77361 Crash at opera::PageView::islocked() - DNA-7739O Previous wellpaper color blinks when focusing tab - DNA-774O3 Tailor font size for fallback tiles - DNA-77545 Opera crashes when trying to create snap Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1:NonFree: zypper in -t patch openSUSE-2019-1919=1 - openSUSE Leap 15.0:NonFree: zypper in -t patch openSUSE-2019-1919=1 Package List: - openSUSE Leap 15.1:NonFree (x86_64): opera-62.0.3331.116-lp151.2.3.1 - openSUSE Leap 15.0:NonFree (x86_64): opera-62.0.3331.116-lp150.2.15.1 References:

1 0

openSUSE-SU-2019:1907-1: important: Security update for nodejs8
by opensuse-security＠opensuse.org 15 Aug '19

15 Aug '19

openSUSE Security Update: Security update for nodejs8 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1907-1 Rating: important References: #1134209 #1140290 Cross-References: CVE-2019-13173 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for nodejs8 fixes the following issues: Security issue fixed: - CVE-2019-13173: Fixed a potential file overwrite via hardlink in fstream.DirWriter() (bsc#1140290). Non-security issue fixed: - Backported fixes for OpenSSL 1.1.1 from nodejs8 (bsc#1134209). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1907=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1907=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): nodejs8-8.15.1-lp151.2.3.1 nodejs8-debuginfo-8.15.1-lp151.2.3.1 nodejs8-debugsource-8.15.1-lp151.2.3.1 nodejs8-devel-8.15.1-lp151.2.3.1 npm8-8.15.1-lp151.2.3.1 - openSUSE Leap 15.1 (noarch): nodejs8-docs-8.15.1-lp151.2.3.1 - openSUSE Leap 15.0 (i586 x86_64): nodejs8-8.15.1-lp150.2.16.1 nodejs8-debuginfo-8.15.1-lp150.2.16.1 nodejs8-debugsource-8.15.1-lp150.2.16.1 nodejs8-devel-8.15.1-lp150.2.16.1 npm8-8.15.1-lp150.2.16.1 - openSUSE Leap 15.0 (noarch): nodejs8-docs-8.15.1-lp150.2.16.1 References: https://www.suse.com/security/cve/CVE-2019-13173.html https://bugzilla.suse.com/1134209 https://bugzilla.suse.com/1140290

1 0

openSUSE-SU-2019:1910-1: important: Security update for subversion
by opensuse-security＠opensuse.org 15 Aug '19

15 Aug '19

openSUSE Security Update: Security update for subversion ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1910-1 Rating: important References: #1142721 #1142743 Cross-References: CVE-2018-11782 CVE-2019-0203 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for subversion to version 1.10.6 fixes the following issues: Security issues fixed: - CVE-2018-11782: Fixed a remote denial of service in svnserve 'get-deleted-rev' (bsc#1142743). - CVE-2019-0203: Fixed a remote, unauthenticated denial of service in svnserve (bsc#1142721). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1910=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1910=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.10.6-lp151.4.3.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.10.6-lp151.4.3.1 libsvn_auth_kwallet-1-0-1.10.6-lp151.4.3.1 libsvn_auth_kwallet-1-0-debuginfo-1.10.6-lp151.4.3.1 subversion-1.10.6-lp151.4.3.1 subversion-debuginfo-1.10.6-lp151.4.3.1 subversion-debugsource-1.10.6-lp151.4.3.1 subversion-devel-1.10.6-lp151.4.3.1 subversion-perl-1.10.6-lp151.4.3.1 subversion-perl-debuginfo-1.10.6-lp151.4.3.1 subversion-python-1.10.6-lp151.4.3.1 subversion-python-ctypes-1.10.6-lp151.4.3.1 subversion-python-debuginfo-1.10.6-lp151.4.3.1 subversion-ruby-1.10.6-lp151.4.3.1 subversion-ruby-debuginfo-1.10.6-lp151.4.3.1 subversion-server-1.10.6-lp151.4.3.1 subversion-server-debuginfo-1.10.6-lp151.4.3.1 subversion-tools-1.10.6-lp151.4.3.1 subversion-tools-debuginfo-1.10.6-lp151.4.3.1 - openSUSE Leap 15.1 (noarch): subversion-bash-completion-1.10.6-lp151.4.3.1 - openSUSE Leap 15.0 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.10.6-lp150.7.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.10.6-lp150.7.1 libsvn_auth_kwallet-1-0-1.10.6-lp150.7.1 libsvn_auth_kwallet-1-0-debuginfo-1.10.6-lp150.7.1 subversion-1.10.6-lp150.7.1 subversion-debuginfo-1.10.6-lp150.7.1 subversion-debugsource-1.10.6-lp150.7.1 subversion-devel-1.10.6-lp150.7.1 subversion-perl-1.10.6-lp150.7.1 subversion-perl-debuginfo-1.10.6-lp150.7.1 subversion-python-1.10.6-lp150.7.1 subversion-python-ctypes-1.10.6-lp150.7.1 subversion-python-debuginfo-1.10.6-lp150.7.1 subversion-ruby-1.10.6-lp150.7.1 subversion-ruby-debuginfo-1.10.6-lp150.7.1 subversion-server-1.10.6-lp150.7.1 subversion-server-debuginfo-1.10.6-lp150.7.1 subversion-tools-1.10.6-lp150.7.1 subversion-tools-debuginfo-1.10.6-lp150.7.1 - openSUSE Leap 15.0 (noarch): subversion-bash-completion-1.10.6-lp150.7.1 References: https://www.suse.com/security/cve/CVE-2018-11782.html https://www.suse.com/security/cve/CVE-2019-0203.html https://bugzilla.suse.com/1142721 https://bugzilla.suse.com/1142743

1 0

openSUSE-SU-2019:1918-1: important: Security update for bzip2
by opensuse-security＠opensuse.org 15 Aug '19

15 Aug '19

openSUSE Security Update: Security update for bzip2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1918-1 Rating: important References: #1139083 Cross-References: CVE-2019-12900 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bzip2 fixes the following issues: - Fixed a regression with the fix for CVE-2019-12900, which caused incompatibilities with files that used many selectors (bsc#1139083). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1918=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1918=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): bzip2-1.0.6-lp151.5.9.1 bzip2-debuginfo-1.0.6-lp151.5.9.1 bzip2-debugsource-1.0.6-lp151.5.9.1 libbz2-1-1.0.6-lp151.5.9.1 libbz2-1-debuginfo-1.0.6-lp151.5.9.1 libbz2-devel-1.0.6-lp151.5.9.1 - openSUSE Leap 15.1 (noarch): bzip2-doc-1.0.6-lp151.5.9.1 - openSUSE Leap 15.1 (x86_64): libbz2-1-32bit-1.0.6-lp151.5.9.1 libbz2-1-32bit-debuginfo-1.0.6-lp151.5.9.1 libbz2-devel-32bit-1.0.6-lp151.5.9.1 - openSUSE Leap 15.0 (i586 x86_64): bzip2-1.0.6-lp150.4.9.1 bzip2-debuginfo-1.0.6-lp150.4.9.1 bzip2-debugsource-1.0.6-lp150.4.9.1 libbz2-1-1.0.6-lp150.4.9.1 libbz2-1-debuginfo-1.0.6-lp150.4.9.1 libbz2-devel-1.0.6-lp150.4.9.1 - openSUSE Leap 15.0 (x86_64): libbz2-1-32bit-1.0.6-lp150.4.9.1 libbz2-1-32bit-debuginfo-1.0.6-lp150.4.9.1 libbz2-devel-32bit-1.0.6-lp150.4.9.1 - openSUSE Leap 15.0 (noarch): bzip2-doc-1.0.6-lp150.4.9.1 References: https://www.suse.com/security/cve/CVE-2019-12900.html https://bugzilla.suse.com/1139083

1 0

openSUSE-RU-2019:1899-1: moderate: Recommended update for keepassxc
by maintenance＠opensuse.org 15 Aug '19

15 Aug '19

openSUSE Recommended Update: Recommended update for keepassxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1899-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for keepassxc fixes the following issues: keepassxc updated to 2.4.3: - Fix library loading issues in the Snap and macOS releases [#3247] - Fix various keyboard navigation issues [#3248] - Fix main window toggling regression when clicking the tray icon on KDE [#3258] - Add documentation for keyboard shortcuts to source code distribution [#3215] This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-1899=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): keepassxc-2.4.3-bp151.3.3.3 - openSUSE Backports SLE-15-SP1 (noarch): keepassxc-lang-2.4.3-bp151.3.3.3 References:

1 0

openSUSE-SU-2019:1914-1: important: Security update for polkit
by opensuse-security＠opensuse.org 15 Aug '19

15 Aug '19

openSUSE Security Update: Security update for polkit ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1914-1 Rating: important References: #1121826 Cross-References: CVE-2019-6133 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for polkit fixes the following issues: Security issue fixed: - CVE-2019-6133: Fixed improper caching of auth decisions, which could bypass uid checking in the interactive backend (bsc#1121826). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1914=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1914=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpolkit0-0.114-lp151.5.3.1 libpolkit0-debuginfo-0.114-lp151.5.3.1 polkit-0.114-lp151.5.3.1 polkit-debuginfo-0.114-lp151.5.3.1 polkit-debugsource-0.114-lp151.5.3.1 polkit-devel-0.114-lp151.5.3.1 polkit-devel-debuginfo-0.114-lp151.5.3.1 typelib-1_0-Polkit-1_0-0.114-lp151.5.3.1 - openSUSE Leap 15.1 (x86_64): libpolkit0-32bit-0.114-lp151.5.3.1 libpolkit0-32bit-debuginfo-0.114-lp151.5.3.1 - openSUSE Leap 15.1 (noarch): polkit-doc-0.114-lp151.5.3.1 - openSUSE Leap 15.0 (i586 x86_64): libpolkit0-0.114-lp150.2.10.1 libpolkit0-debuginfo-0.114-lp150.2.10.1 polkit-0.114-lp150.2.10.1 polkit-debuginfo-0.114-lp150.2.10.1 polkit-debugsource-0.114-lp150.2.10.1 polkit-devel-0.114-lp150.2.10.1 polkit-devel-debuginfo-0.114-lp150.2.10.1 typelib-1_0-Polkit-1_0-0.114-lp150.2.10.1 - openSUSE Leap 15.0 (x86_64): libpolkit0-32bit-0.114-lp150.2.10.1 libpolkit0-32bit-debuginfo-0.114-lp150.2.10.1 - openSUSE Leap 15.0 (noarch): polkit-doc-0.114-lp150.2.10.1 References: https://www.suse.com/security/cve/CVE-2019-6133.html https://bugzilla.suse.com/1121826

1 0

openSUSE-SU-2019:1901-1: important: Security update for chromium
by opensuse-security＠opensuse.org 15 Aug '19

15 Aug '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1901-1 Rating: important References: #1143492 #1144625 Cross-References: CVE-2019-5850 CVE-2019-5851 CVE-2019-5852 CVE-2019-5853 CVE-2019-5854 CVE-2019-5855 CVE-2019-5856 CVE-2019-5857 CVE-2019-5858 CVE-2019-5859 CVE-2019-5860 CVE-2019-5861 CVE-2019-5862 CVE-2019-5863 CVE-2019-5864 CVE-2019-5865 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes 16 vulnerabilities is now available. Description: This update for chromium to version 76.0.3809.87 fixes the following issues: - CVE-2019-5850: Use-after-free in offline page fetcher (boo#1143492) - CVE-2019-5860: Use-after-free in PDFium (boo#1143492) - CVE-2019-5853: Memory corruption in regexp length check (boo#1143492) - CVE-2019-5851: Use-after-poison in offline audio context (boo#1143492) - CVE-2019-5859: res: URIs can load alternative browsers (boo#1143492) - CVE-2019-5856: Insufficient checks on filesystem: URI permissions (boo#1143492) - CVE-2019-5855: Integer overflow in PDFium (boo#1143492) - CVE-2019-5865: Site isolation bypass from compromised renderer (boo#1143492) - CVE-2019-5858: Insufficient filtering of Open URL service parameters (boo#1143492) - CVE-2019-5864: Insufficient port filtering in CORS for extensions (boo#1143492) - CVE-2019-5862: AppCache not robust to compromised renderers (boo#1143492) - CVE-2019-5861: Click location incorrectly checked (boo#1143492) - CVE-2019-5857: Comparison of -0 and null yields crash (boo#1143492) - CVE-2019-5854: Integer overflow in PDFium text rendering (boo#1143492) - CVE-2019-5852: Object leak of utility functions (boo#1143492) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-1901=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-76.0.3809.87-bp151.3.3.3 chromium-76.0.3809.87-bp151.3.3.3 References: https://www.suse.com/security/cve/CVE-2019-5850.html https://www.suse.com/security/cve/CVE-2019-5851.html https://www.suse.com/security/cve/CVE-2019-5852.html https://www.suse.com/security/cve/CVE-2019-5853.html https://www.suse.com/security/cve/CVE-2019-5854.html https://www.suse.com/security/cve/CVE-2019-5855.html https://www.suse.com/security/cve/CVE-2019-5856.html https://www.suse.com/security/cve/CVE-2019-5857.html https://www.suse.com/security/cve/CVE-2019-5858.html https://www.suse.com/security/cve/CVE-2019-5859.html https://www.suse.com/security/cve/CVE-2019-5860.html https://www.suse.com/security/cve/CVE-2019-5861.html https://www.suse.com/security/cve/CVE-2019-5862.html https://www.suse.com/security/cve/CVE-2019-5863.html https://www.suse.com/security/cve/CVE-2019-5864.html https://www.suse.com/security/cve/CVE-2019-5865.html https://bugzilla.suse.com/1143492 https://bugzilla.suse.com/1144625

1 0

openSUSE-SU-2019:1905-1: important: Security update for dosbox
by opensuse-security＠opensuse.org 15 Aug '19

15 Aug '19

openSUSE Security Update: Security update for dosbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1905-1 Rating: important References: #1140254 Cross-References: CVE-2019-12594 CVE-2019-7165 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for dosbox fixes the following issues: Security issues fixed: - CVE-2019-7165: Fixed that a very long line inside a bat file would overflow the parsing buffer (bnc#1140254). - CVE-2019-12594: Added a basic permission system so that a program running inside DOSBox can't access the contents of /proc (e.g. /proc/self/mem) when / or /proc were (to be) mounted (bnc#1140254). - Several other fixes for out of bounds access and buffer overflows. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1905=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1905=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1905=1 Package List: - openSUSE Leap 15.1 (x86_64): dosbox-0.74.3-lp151.3.3.1 dosbox-debuginfo-0.74.3-lp151.3.3.1 dosbox-debugsource-0.74.3-lp151.3.3.1 - openSUSE Leap 15.0 (x86_64): dosbox-0.74.3-lp150.2.3.1 dosbox-debuginfo-0.74.3-lp150.2.3.1 dosbox-debugsource-0.74.3-lp150.2.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): dosbox-0.74.3-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-12594.html https://www.suse.com/security/cve/CVE-2019-7165.html https://bugzilla.suse.com/1140254

1 0

openSUSE-SU-2019:1908-1: important: Security update for evince
by opensuse-security＠opensuse.org 15 Aug '19

15 Aug '19

openSUSE Security Update: Security update for evince ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1908-1 Rating: important References: #1141619 Cross-References: CVE-2019-1010006 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for evince fixes the following issues: - CVE-2019-1010006: Fixed a buffer overflow in backend/tiff/tiff-document.c (bsc#1141619). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1908=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1908=1 Package List: - openSUSE Leap 15.1 (noarch): evince-lang-3.26.0+20180128.1bd86963-lp151.4.6.1 - openSUSE Leap 15.1 (x86_64): evince-3.26.0+20180128.1bd86963-lp151.4.6.1 evince-debuginfo-3.26.0+20180128.1bd86963-lp151.4.6.1 evince-debugsource-3.26.0+20180128.1bd86963-lp151.4.6.1 evince-devel-3.26.0+20180128.1bd86963-lp151.4.6.1 evince-plugin-comicsdocument-3.26.0+20180128.1bd86963-lp151.4.6.1 evince-plugin-comicsdocument-debuginfo-3.26.0+20180128.1bd86963-lp151.4.6.1 evince-plugin-djvudocument-3.26.0+20180128.1bd86963-lp151.4.6.1 evince-plugin-djvudocument-debuginfo-3.26.0+20180128.1bd86963-lp151.4.6.1 evince-plugin-dvidocument-3.26.0+20180128.1bd86963-lp151.4.6.1 evince-plugin-dvidocument-debuginfo-3.26.0+20180128.1bd86963-lp151.4.6.1 evince-plugin-pdfdocument-3.26.0+20180128.1bd86963-lp151.4.6.1 evince-plugin-pdfdocument-debuginfo-3.26.0+20180128.1bd86963-lp151.4.6.1 evince-plugin-psdocument-3.26.0+20180128.1bd86963-lp151.4.6.1 evince-plugin-psdocument-debuginfo-3.26.0+20180128.1bd86963-lp151.4.6.1 evince-plugin-tiffdocument-3.26.0+20180128.1bd86963-lp151.4.6.1 evince-plugin-tiffdocument-debuginfo-3.26.0+20180128.1bd86963-lp151.4.6.1 evince-plugin-xpsdocument-3.26.0+20180128.1bd86963-lp151.4.6.1 evince-plugin-xpsdocument-debuginfo-3.26.0+20180128.1bd86963-lp151.4.6.1 libevdocument3-4-3.26.0+20180128.1bd86963-lp151.4.6.1 libevdocument3-4-debuginfo-3.26.0+20180128.1bd86963-lp151.4.6.1 libevview3-3-3.26.0+20180128.1bd86963-lp151.4.6.1 libevview3-3-debuginfo-3.26.0+20180128.1bd86963-lp151.4.6.1 nautilus-evince-3.26.0+20180128.1bd86963-lp151.4.6.1 nautilus-evince-debuginfo-3.26.0+20180128.1bd86963-lp151.4.6.1 typelib-1_0-EvinceDocument-3_0-3.26.0+20180128.1bd86963-lp151.4.6.1 typelib-1_0-EvinceView-3_0-3.26.0+20180128.1bd86963-lp151.4.6.1 - openSUSE Leap 15.0 (noarch): evince-lang-3.26.0+20180128.1bd86963-lp150.3.6.1 - openSUSE Leap 15.0 (x86_64): evince-3.26.0+20180128.1bd86963-lp150.3.6.1 evince-debuginfo-3.26.0+20180128.1bd86963-lp150.3.6.1 evince-debugsource-3.26.0+20180128.1bd86963-lp150.3.6.1 evince-devel-3.26.0+20180128.1bd86963-lp150.3.6.1 evince-plugin-comicsdocument-3.26.0+20180128.1bd86963-lp150.3.6.1 evince-plugin-comicsdocument-debuginfo-3.26.0+20180128.1bd86963-lp150.3.6.1 evince-plugin-djvudocument-3.26.0+20180128.1bd86963-lp150.3.6.1 evince-plugin-djvudocument-debuginfo-3.26.0+20180128.1bd86963-lp150.3.6.1 evince-plugin-dvidocument-3.26.0+20180128.1bd86963-lp150.3.6.1 evince-plugin-dvidocument-debuginfo-3.26.0+20180128.1bd86963-lp150.3.6.1 evince-plugin-pdfdocument-3.26.0+20180128.1bd86963-lp150.3.6.1 evince-plugin-pdfdocument-debuginfo-3.26.0+20180128.1bd86963-lp150.3.6.1 evince-plugin-psdocument-3.26.0+20180128.1bd86963-lp150.3.6.1 evince-plugin-psdocument-debuginfo-3.26.0+20180128.1bd86963-lp150.3.6.1 evince-plugin-tiffdocument-3.26.0+20180128.1bd86963-lp150.3.6.1 evince-plugin-tiffdocument-debuginfo-3.26.0+20180128.1bd86963-lp150.3.6.1 evince-plugin-xpsdocument-3.26.0+20180128.1bd86963-lp150.3.6.1 evince-plugin-xpsdocument-debuginfo-3.26.0+20180128.1bd86963-lp150.3.6.1 libevdocument3-4-3.26.0+20180128.1bd86963-lp150.3.6.1 libevdocument3-4-debuginfo-3.26.0+20180128.1bd86963-lp150.3.6.1 libevview3-3-3.26.0+20180128.1bd86963-lp150.3.6.1 libevview3-3-debuginfo-3.26.0+20180128.1bd86963-lp150.3.6.1 nautilus-evince-3.26.0+20180128.1bd86963-lp150.3.6.1 nautilus-evince-debuginfo-3.26.0+20180128.1bd86963-lp150.3.6.1 typelib-1_0-EvinceDocument-3_0-3.26.0+20180128.1bd86963-lp150.3.6.1 typelib-1_0-EvinceView-3_0-3.26.0+20180128.1bd86963-lp150.3.6.1 References: https://www.suse.com/security/cve/CVE-2019-1010006.html https://bugzilla.suse.com/1141619

1 0