September 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:2151-1: moderate: Recommended update for apache2-mod_nss
by maintenance＠opensuse.org 18 Sep '19

18 Sep '19

openSUSE Recommended Update: Recommended update for apache2-mod_nss ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2151-1 Rating: moderate References: #1150133 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for apache2-mod_nss fixes the following issues: - Use a stronger password in gencert to pass the stricter tests in FIPS mode (bsc#1150133) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2151=1 Package List: - openSUSE Leap 15.1 (x86_64): apache2-mod_nss-1.0.17-lp151.3.3.1 apache2-mod_nss-debuginfo-1.0.17-lp151.3.3.1 apache2-mod_nss-debugsource-1.0.17-lp151.3.3.1 References: https://bugzilla.suse.com/1150133

1 0

openSUSE-RU-2019:2150-1: moderate: Recommended update for kvm_stat
by maintenance＠opensuse.org 18 Sep '19

18 Sep '19

openSUSE Recommended Update: Recommended update for kvm_stat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2150-1 Rating: moderate References: #1140899 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kvm_stat fixes the following issues: - Fixes an issue where the wrong python version was used (bsc#1140899) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2150=1 Package List: - openSUSE Leap 15.1 (noarch): kvm_stat-4.12.14-lp151.7.3.1 References: https://bugzilla.suse.com/1140899

1 0

openSUSE-SU-2019:2149-1: important: Security update for curl
by opensuse-security＠opensuse.org 17 Sep '19

17 Sep '19

openSUSE Security Update: Security update for curl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2149-1 Rating: important References: #1149495 #1149496 Cross-References: CVE-2019-5481 CVE-2019-5482 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for curl fixes the following issues: Security issues fixed: - CVE-2019-5481: Fixed FTP-KRB double-free during kerberos FTP data transfer (bsc#1149495). - CVE-2019-5482: Fixed TFTP small blocksize heap buffer overflow (bsc#1149496). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2149=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): curl-7.60.0-lp151.5.6.1 curl-debuginfo-7.60.0-lp151.5.6.1 curl-debugsource-7.60.0-lp151.5.6.1 curl-mini-7.60.0-lp151.5.6.1 curl-mini-debuginfo-7.60.0-lp151.5.6.1 curl-mini-debugsource-7.60.0-lp151.5.6.1 libcurl-devel-7.60.0-lp151.5.6.1 libcurl-mini-devel-7.60.0-lp151.5.6.1 libcurl4-7.60.0-lp151.5.6.1 libcurl4-debuginfo-7.60.0-lp151.5.6.1 libcurl4-mini-7.60.0-lp151.5.6.1 libcurl4-mini-debuginfo-7.60.0-lp151.5.6.1 - openSUSE Leap 15.1 (x86_64): libcurl-devel-32bit-7.60.0-lp151.5.6.1 libcurl4-32bit-7.60.0-lp151.5.6.1 libcurl4-32bit-debuginfo-7.60.0-lp151.5.6.1 References: https://www.suse.com/security/cve/CVE-2019-5481.html https://www.suse.com/security/cve/CVE-2019-5482.html https://bugzilla.suse.com/1149495 https://bugzilla.suse.com/1149496

1 0

openSUSE-RU-2019:2147-1: moderate: Recommended update for python-cairo
by maintenance＠opensuse.org 17 Sep '19

17 Sep '19

openSUSE Recommended Update: Recommended update for python-cairo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2147-1 Rating: moderate References: #1142582 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-cairo does not fix any visible issues to users. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2147=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): python-cairo-common-devel-1.15.1-lp151.3.3.1 python-cairo-debuginfo-1.15.1-lp151.3.3.1 python-cairo-debugsource-1.15.1-lp151.3.3.1 python2-cairo-1.15.1-lp151.3.3.1 python2-cairo-debuginfo-1.15.1-lp151.3.3.1 python2-cairo-devel-1.15.1-lp151.3.3.1 python3-cairo-1.15.1-lp151.3.3.1 python3-cairo-debuginfo-1.15.1-lp151.3.3.1 python3-cairo-devel-1.15.1-lp151.3.3.1 References: https://bugzilla.suse.com/1142582

1 0

openSUSE-RU-2019:2148-1: moderate: Recommended update for lvm2
by maintenance＠opensuse.org 17 Sep '19

17 Sep '19

openSUSE Recommended Update: Recommended update for lvm2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2148-1 Rating: moderate References: #1122666 #1135984 #1137296 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for lvm2 fixes the following issues: - Fix unknown feature in status message (bsc#1135984) - Fix using device aliases with lvmetad (bsc#1137296) - Fix devices drop open error message (bsc#1122666) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2148=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): device-mapper-1.02.149-lp151.4.3.1 device-mapper-debuginfo-1.02.149-lp151.4.3.1 device-mapper-debugsource-1.02.149-lp151.4.3.1 device-mapper-devel-1.02.149-lp151.4.3.1 libdevmapper-event1_03-1.02.149-lp151.4.3.1 libdevmapper-event1_03-debuginfo-1.02.149-lp151.4.3.1 libdevmapper1_03-1.02.149-lp151.4.3.1 libdevmapper1_03-debuginfo-1.02.149-lp151.4.3.1 liblvm2app2_2-2.02.180-lp151.4.3.1 liblvm2app2_2-debuginfo-2.02.180-lp151.4.3.1 liblvm2cmd2_02-2.02.180-lp151.4.3.1 liblvm2cmd2_02-debuginfo-2.02.180-lp151.4.3.1 lvm2-2.02.180-lp151.4.3.1 lvm2-clvm-2.02.180-lp151.4.3.1 lvm2-clvm-debuginfo-2.02.180-lp151.4.3.1 lvm2-clvm-debugsource-2.02.180-lp151.4.3.1 lvm2-cmirrord-2.02.180-lp151.4.3.1 lvm2-cmirrord-debuginfo-2.02.180-lp151.4.3.1 lvm2-debuginfo-2.02.180-lp151.4.3.1 lvm2-debugsource-2.02.180-lp151.4.3.1 lvm2-devel-2.02.180-lp151.4.3.1 lvm2-lockd-2.02.180-lp151.4.3.1 lvm2-lockd-debuginfo-2.02.180-lp151.4.3.1 lvm2-testsuite-2.02.180-lp151.4.3.1 lvm2-testsuite-debuginfo-2.02.180-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): device-mapper-devel-32bit-1.02.149-lp151.4.3.1 libdevmapper-event1_03-32bit-1.02.149-lp151.4.3.1 libdevmapper-event1_03-32bit-debuginfo-1.02.149-lp151.4.3.1 libdevmapper1_03-32bit-1.02.149-lp151.4.3.1 libdevmapper1_03-32bit-debuginfo-1.02.149-lp151.4.3.1 References: https://bugzilla.suse.com/1122666 https://bugzilla.suse.com/1135984 https://bugzilla.suse.com/1137296

1 0

openSUSE-RU-2019:2146-1: moderate: Recommended update for mate-menus
by maintenance＠opensuse.org 17 Sep '19

17 Sep '19

openSUSE Recommended Update: Recommended update for mate-menus ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2146-1 Rating: moderate References: #1144346 #1149132 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for mate-menus fixes the following issues: Revert of the previous update to the original 15.1 state (bsc#1149132): - Fix a crash of mate-menu due to a missing symbol (boo#1144346) Remove subpackages: * python2-mate-menus and python-mate-menus: dropped in patch series, mate-menus examples go to the devel subpackage Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2146=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libmate-menu2-1.20.0-lp151.3.8.1 libmate-menu2-debuginfo-1.20.0-lp151.3.8.1 mate-menus-1.20.0-lp151.3.8.1 mate-menus-debugsource-1.20.0-lp151.3.8.1 mate-menus-devel-1.20.0-lp151.3.8.1 python2-mate-menus-1.20.0-lp151.3.8.1 python2-mate-menus-debuginfo-1.20.0-lp151.3.8.1 typelib-1_0-MateMenu-2_0-1.20.0-lp151.3.8.1 - openSUSE Leap 15.1 (noarch): mate-menus-branding-upstream-1.20.0-lp151.3.8.1 mate-menus-lang-1.20.0-lp151.3.8.1 - openSUSE Leap 15.1 (x86_64): libmate-menu2-32bit-1.20.0-lp151.3.8.1 libmate-menu2-32bit-debuginfo-1.20.0-lp151.3.8.1 References: https://bugzilla.suse.com/1144346 https://bugzilla.suse.com/1149132

1 0

openSUSE-RU-2019:2144-1: moderate: Recommended update for krb5
by maintenance＠opensuse.org 17 Sep '19

17 Sep '19

openSUSE Recommended Update: Recommended update for krb5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2144-1 Rating: moderate References: #1081947 #1144047 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for krb5 contains the following fixes: - Integrate pam_keyinit PAM module, ksu-pam.d. (bsc#1081947) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2144=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): krb5-1.16.3-lp151.2.6.1 krb5-client-1.16.3-lp151.2.6.1 krb5-client-debuginfo-1.16.3-lp151.2.6.1 krb5-debuginfo-1.16.3-lp151.2.6.1 krb5-debugsource-1.16.3-lp151.2.6.1 krb5-devel-1.16.3-lp151.2.6.1 krb5-mini-1.16.3-lp151.2.6.1 krb5-mini-debuginfo-1.16.3-lp151.2.6.1 krb5-mini-debugsource-1.16.3-lp151.2.6.1 krb5-mini-devel-1.16.3-lp151.2.6.1 krb5-plugin-kdb-ldap-1.16.3-lp151.2.6.1 krb5-plugin-kdb-ldap-debuginfo-1.16.3-lp151.2.6.1 krb5-plugin-preauth-otp-1.16.3-lp151.2.6.1 krb5-plugin-preauth-otp-debuginfo-1.16.3-lp151.2.6.1 krb5-plugin-preauth-pkinit-1.16.3-lp151.2.6.1 krb5-plugin-preauth-pkinit-debuginfo-1.16.3-lp151.2.6.1 krb5-server-1.16.3-lp151.2.6.1 krb5-server-debuginfo-1.16.3-lp151.2.6.1 - openSUSE Leap 15.1 (x86_64): krb5-32bit-1.16.3-lp151.2.6.1 krb5-32bit-debuginfo-1.16.3-lp151.2.6.1 krb5-devel-32bit-1.16.3-lp151.2.6.1 References: https://bugzilla.suse.com/1081947 https://bugzilla.suse.com/1144047

1 0

openSUSE-SU-2019:2145-1: moderate: Security update for python-Werkzeug
by opensuse-security＠opensuse.org 17 Sep '19

17 Sep '19

openSUSE Security Update: Security update for python-Werkzeug ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2145-1 Rating: moderate References: #1145383 Cross-References: CVE-2019-14806 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-Werkzeug fixes the following issues: Security issue fixed: - CVE-2019-14806: Fixed the development server in Docker, the debugger security pin is now unique per container (bsc#1145383). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2145=1 Package List: - openSUSE Leap 15.1 (noarch): python-Werkzeug-doc-0.14.1-lp151.2.3.1 python2-Werkzeug-0.14.1-lp151.2.3.1 python3-Werkzeug-0.14.1-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-14806.html https://bugzilla.suse.com/1145383

1 0

openSUSE-SU-2019:2143-1: moderate: Security update for podman
by opensuse-security＠opensuse.org 16 Sep '19

16 Sep '19

openSUSE Security Update: Security update for podman ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2143-1 Rating: moderate References: #1144065 Cross-References: CVE-2019-10214 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for podman fixes the following issues: Security issue fixed: - CVE-2019-10214: Fixed missing enforcement of TLS connections. (bsc#1144065) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2143=1 Package List: - openSUSE Leap 15.1 (noarch): podman-cni-config-1.4.4-lp151.3.6.1 - openSUSE Leap 15.1 (x86_64): podman-1.4.4-lp151.3.6.1 References: https://www.suse.com/security/cve/CVE-2019-10214.html https://bugzilla.suse.com/1144065

1 0

openSUSE-SU-2019:2142-1: moderate: Security update for samba
by opensuse-security＠opensuse.org 16 Sep '19

16 Sep '19

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2142-1 Rating: moderate References: #1141267 #1144059 Cross-References: CVE-2019-10197 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for samba fixes the following issues: Security issue fixed: - CVE-2019-10197: Fixed user escape from share path definition (bsc#1141267). Bug fix: - Prepare for future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2142=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ctdb-4.9.5+git.187.71edee57d5a-lp151.2.6.1 ctdb-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 ctdb-pcp-pmda-4.9.5+git.187.71edee57d5a-lp151.2.6.1 ctdb-pcp-pmda-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 ctdb-tests-4.9.5+git.187.71edee57d5a-lp151.2.6.1 ctdb-tests-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libdcerpc-binding0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libdcerpc-binding0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libdcerpc-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libdcerpc-samr-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libdcerpc-samr0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libdcerpc-samr0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libdcerpc0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libdcerpc0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-krb5pac-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-krb5pac0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-krb5pac0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-nbt-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-nbt0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-nbt0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-standard-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-standard0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-standard0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libnetapi-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libnetapi0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libnetapi0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-credentials-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-credentials0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-credentials0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-errors-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-errors0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-errors0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-hostconfig-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-hostconfig0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-hostconfig0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-passdb-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-passdb0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-passdb0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-policy-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-policy-python-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-policy-python3-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-policy0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-policy0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-policy0-python3-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-policy0-python3-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-util-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-util0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-util0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamdb-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamdb0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamdb0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbclient-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbclient0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbclient0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbconf-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbconf0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbconf0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbldap-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbldap2-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbldap2-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libtevent-util-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libtevent-util0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libtevent-util0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libwbclient-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libwbclient0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libwbclient0-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-ad-dc-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-ad-dc-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-client-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-client-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-core-devel-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-debugsource-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-dsdb-modules-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-dsdb-modules-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-libs-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-libs-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-libs-python-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-libs-python-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-libs-python3-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-libs-python3-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-pidl-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-python-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-python-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-python3-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-python3-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-test-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-test-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-winbind-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-winbind-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 - openSUSE Leap 15.1 (noarch): samba-doc-4.9.5+git.187.71edee57d5a-lp151.2.6.1 - openSUSE Leap 15.1 (x86_64): libdcerpc-binding0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libdcerpc-binding0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libdcerpc-samr0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libdcerpc-samr0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libdcerpc0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libdcerpc0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-krb5pac0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-krb5pac0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-nbt0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-nbt0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-standard0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr-standard0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libndr0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libnetapi0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libnetapi0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-credentials0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-credentials0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-errors0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-errors0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-hostconfig0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-hostconfig0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-passdb0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-passdb0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-policy0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-policy0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-policy0-python3-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-policy0-python3-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-util0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamba-util0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamdb0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsamdb0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbclient0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbclient0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbconf0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbconf0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbldap2-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libsmbldap2-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libtevent-util0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libtevent-util0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libwbclient0-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 libwbclient0-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-ad-dc-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-ad-dc-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-ceph-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-ceph-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-client-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-client-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-libs-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-libs-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-libs-python-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-libs-python-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-libs-python3-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-libs-python3-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-winbind-32bit-4.9.5+git.187.71edee57d5a-lp151.2.6.1 samba-winbind-32bit-debuginfo-4.9.5+git.187.71edee57d5a-lp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-10197.html https://bugzilla.suse.com/1141267 https://bugzilla.suse.com/1144059

1 0

openSUSE-RU-2019:2141-1: moderate: Recommended update for lmdb
by maintenance＠opensuse.org 16 Sep '19

16 Sep '19

openSUSE Recommended Update: Recommended update for lmdb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2141-1 Rating: moderate References: #1136132 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lmdb fixes the following issues: - Fix occasional crash when freed pages landed on the dirty list twice (bsc#1136132). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2141=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): liblmdb-0_9_17-0.9.17-lp151.4.3.1 liblmdb-0_9_17-debuginfo-0.9.17-lp151.4.3.1 lmdb-0.9.17-lp151.4.3.1 lmdb-debuginfo-0.9.17-lp151.4.3.1 lmdb-debugsource-0.9.17-lp151.4.3.1 lmdb-devel-0.9.17-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): liblmdb-0_9_17-32bit-0.9.17-lp151.4.3.1 liblmdb-0_9_17-32bit-debuginfo-0.9.17-lp151.4.3.1 References: https://bugzilla.suse.com/1136132

1 0

openSUSE-RU-2019:2140-1: moderate: Recommended update for rsyslog
by maintenance＠opensuse.org 16 Sep '19

16 Sep '19

openSUSE Recommended Update: Recommended update for rsyslog ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2140-1 Rating: moderate References: #1146872 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rsyslog brings support for the "mmkubernetes" rsyslog module. (FATE#327800 bsc#1146872) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2140=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): rsyslog-8.33.1-lp151.6.6.1 rsyslog-debuginfo-8.33.1-lp151.6.6.1 rsyslog-debugsource-8.33.1-lp151.6.6.1 rsyslog-diag-tools-8.33.1-lp151.6.6.1 rsyslog-diag-tools-debuginfo-8.33.1-lp151.6.6.1 rsyslog-doc-8.33.1-lp151.6.6.1 rsyslog-module-dbi-8.33.1-lp151.6.6.1 rsyslog-module-dbi-debuginfo-8.33.1-lp151.6.6.1 rsyslog-module-elasticsearch-8.33.1-lp151.6.6.1 rsyslog-module-elasticsearch-debuginfo-8.33.1-lp151.6.6.1 rsyslog-module-gcrypt-8.33.1-lp151.6.6.1 rsyslog-module-gcrypt-debuginfo-8.33.1-lp151.6.6.1 rsyslog-module-gssapi-8.33.1-lp151.6.6.1 rsyslog-module-gssapi-debuginfo-8.33.1-lp151.6.6.1 rsyslog-module-gtls-8.33.1-lp151.6.6.1 rsyslog-module-gtls-debuginfo-8.33.1-lp151.6.6.1 rsyslog-module-mmnormalize-8.33.1-lp151.6.6.1 rsyslog-module-mmnormalize-debuginfo-8.33.1-lp151.6.6.1 rsyslog-module-mysql-8.33.1-lp151.6.6.1 rsyslog-module-mysql-debuginfo-8.33.1-lp151.6.6.1 rsyslog-module-omamqp1-8.33.1-lp151.6.6.1 rsyslog-module-omamqp1-debuginfo-8.33.1-lp151.6.6.1 rsyslog-module-omhttpfs-8.33.1-lp151.6.6.1 rsyslog-module-omhttpfs-debuginfo-8.33.1-lp151.6.6.1 rsyslog-module-omtcl-8.33.1-lp151.6.6.1 rsyslog-module-omtcl-debuginfo-8.33.1-lp151.6.6.1 rsyslog-module-pgsql-8.33.1-lp151.6.6.1 rsyslog-module-pgsql-debuginfo-8.33.1-lp151.6.6.1 rsyslog-module-relp-8.33.1-lp151.6.6.1 rsyslog-module-relp-debuginfo-8.33.1-lp151.6.6.1 rsyslog-module-snmp-8.33.1-lp151.6.6.1 rsyslog-module-snmp-debuginfo-8.33.1-lp151.6.6.1 rsyslog-module-udpspoof-8.33.1-lp151.6.6.1 rsyslog-module-udpspoof-debuginfo-8.33.1-lp151.6.6.1 References: https://bugzilla.suse.com/1146872

1 0

openSUSE-SU-2019:2139-1: moderate: Security update for ghostscript
by opensuse-security＠opensuse.org 16 Sep '19

16 Sep '19

openSUSE Security Update: Security update for ghostscript ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2139-1 Rating: moderate References: #1144621 Cross-References: CVE-2019-10216 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ghostscript fixes the following issues: Security issue fixed: - CVE-2019-10216: Fix privilege escalation via specially crafted PostScript file (bsc#1144621). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2139=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ghostscript-9.26a-lp151.3.3.1 ghostscript-debuginfo-9.26a-lp151.3.3.1 ghostscript-debugsource-9.26a-lp151.3.3.1 ghostscript-devel-9.26a-lp151.3.3.1 ghostscript-mini-9.26a-lp151.3.3.1 ghostscript-mini-debuginfo-9.26a-lp151.3.3.1 ghostscript-mini-debugsource-9.26a-lp151.3.3.1 ghostscript-mini-devel-9.26a-lp151.3.3.1 ghostscript-x11-9.26a-lp151.3.3.1 ghostscript-x11-debuginfo-9.26a-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-10216.html https://bugzilla.suse.com/1144621

1 0

openSUSE-SU-2019:2138-1: important: Security update for skopeo
by opensuse-security＠opensuse.org 15 Sep '19

15 Sep '19

openSUSE Security Update: Security update for skopeo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2138-1 Rating: important References: #1144065 Cross-References: CVE-2019-10214 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for skopeo fixes the following issues: Security issues fixed: - CVE-2019-10214: Fixed missing enforcement of TLS connections (bsc#1144065). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2138=1 Package List: - openSUSE Leap 15.1 (x86_64): skopeo-0.1.32-lp151.2.3.1 skopeo-debuginfo-0.1.32-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-10214.html https://bugzilla.suse.com/1144065

1 0

openSUSE-SU-2019:2137-1: important: Security update for buildah
by opensuse-security＠opensuse.org 15 Sep '19

15 Sep '19

openSUSE Security Update: Security update for buildah ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2137-1 Rating: important References: #1144065 Cross-References: CVE-2019-10214 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for buildah fixes the following issues: Security issue fixed: - CVE-2019-10214: Fixed missing enforcement of TLS connections. (bsc#1144065) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2137=1 Package List: - openSUSE Leap 15.1 (x86_64): buildah-1.7.1-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-10214.html https://bugzilla.suse.com/1144065

1 0

openSUSE-RU-2019:2136-1: moderate: Recommended update for virtualbox
by maintenance＠opensuse.org 15 Sep '19

15 Sep '19

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2136-1 Rating: moderate References: #1142955 #1142995 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for virtualbox fixes the following issues: Version update to 6.0.12 (released September 03 2019 by Oracle): This is a maintenance release. The following items were fixed and/or added: - OCI export: handle empty disk image correctly - API: fix potential crash when using the medium I/O functionality - VBoxManage: fixed documentation of VBoxManage modifyvm uarttype documentation (bug #18759) - Network: scrub inbound TCP URG pointer, working around incorrect OOB handling - USB: Improved identification of power-saved devices on Windows hosts - Audio: in the AC97 work around buggy guest drivers which reprogram the sampling rate, breaking audio in and/or audio out - Linux host and guest: fix kernel module build for SLES 12 SP4 kernel - 3D: fixed state saving and loading when the VBoxVGA graphics adapter is used with 3D enabled (bug #18802, 6.0.10 regression) - Windows guests: fixed mouse cursor visibility updating - Windows guests: fixed graphics corruption in Windows 10 search menu with VBoxSVGA adapter - Windows guests: fixed dwm.exe crashes related to the WDDM driver for VBoxSVGA adapter when the VM has lots of RAM - MacOS Guest Additions fail to start in 6.0.10 (bug #18793) - Windows guests: fixed crashes when using shared folders (bug #18766) - Linux guests: unprivileged users unable to create files inside shared folders (bug #18737) - Linux guests: improve compatibility of vboxvideo.ko kernel module build logic (bug #18869) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2136=1 Package List: - openSUSE Leap 15.0 (x86_64): python3-virtualbox-6.0.12-lp150.4.39.1 python3-virtualbox-debuginfo-6.0.12-lp150.4.39.1 virtualbox-6.0.12-lp150.4.39.1 virtualbox-debuginfo-6.0.12-lp150.4.39.1 virtualbox-debugsource-6.0.12-lp150.4.39.1 virtualbox-devel-6.0.12-lp150.4.39.1 virtualbox-guest-tools-6.0.12-lp150.4.39.1 virtualbox-guest-tools-debuginfo-6.0.12-lp150.4.39.1 virtualbox-guest-x11-6.0.12-lp150.4.39.1 virtualbox-guest-x11-debuginfo-6.0.12-lp150.4.39.1 virtualbox-kmp-default-6.0.12_k4.12.14_lp150.12.70-lp150.4.39.1 virtualbox-kmp-default-debuginfo-6.0.12_k4.12.14_lp150.12.70-lp150.4.39.1 virtualbox-qt-6.0.12-lp150.4.39.1 virtualbox-qt-debuginfo-6.0.12-lp150.4.39.1 virtualbox-vnc-6.0.12-lp150.4.39.1 virtualbox-websrv-6.0.12-lp150.4.39.1 virtualbox-websrv-debuginfo-6.0.12-lp150.4.39.1 - openSUSE Leap 15.0 (noarch): virtualbox-guest-desktop-icons-6.0.12-lp150.4.39.1 virtualbox-guest-source-6.0.12-lp150.4.39.1 virtualbox-host-source-6.0.12-lp150.4.39.1 References: https://bugzilla.suse.com/1142955 https://bugzilla.suse.com/1142995

1 0

openSUSE-RU-2019:2134-1: moderate: Recommended update for kpat
by maintenance＠opensuse.org 14 Sep '19

14 Sep '19

openSUSE Recommended Update: Recommended update for kpat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2134-1 Rating: moderate References: #1146622 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kpat fixes the following issues: - Fixed crashes due to resource exhaustion (boo#1146622, kde#395624) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2134=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2134=1 Package List: - openSUSE Leap 15.1 (noarch): kpat-lang-18.12.3-lp151.3.4.1 - openSUSE Leap 15.1 (x86_64): kpat-18.12.3-lp151.3.4.1 kpat-debuginfo-18.12.3-lp151.3.4.1 kpat-debugsource-18.12.3-lp151.3.4.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): kpat-18.12.3-bp151.4.3.1 - openSUSE Backports SLE-15-SP1 (noarch): kpat-lang-18.12.3-bp151.4.3.1 References: https://bugzilla.suse.com/1146622

1 0

openSUSE-SU-2019:2133-1: moderate: Security update for python-urllib3
by opensuse-security＠opensuse.org 14 Sep '19

14 Sep '19

openSUSE Security Update: Security update for python-urllib3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2133-1 Rating: moderate References: #1129071 #1132663 #1132900 Cross-References: CVE-2019-11236 CVE-2019-11324 CVE-2019-9740 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for python-urllib3 fixes the following issues: Security issues fixed: - CVE-2019-9740: Fixed CRLF injection issue (bsc#1129071). - CVE-2019-11324: Fixed invalid CA certificat verification (bsc#1132900). - CVE-2019-11236: Fixed CRLF injection via request parameter (bsc#1132663). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2133=1 Package List: - openSUSE Leap 15.1 (noarch): python2-urllib3-1.24-lp151.2.3.1 python2-urllib3-test-1.24-lp151.2.3.1 python3-urllib3-1.24-lp151.2.3.1 python3-urllib3-test-1.24-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-11236.html https://www.suse.com/security/cve/CVE-2019-11324.html https://www.suse.com/security/cve/CVE-2019-9740.html https://bugzilla.suse.com/1129071 https://bugzilla.suse.com/1132663 https://bugzilla.suse.com/1132900

1 0

openSUSE-SU-2019:2135-1: important: Security update for rdesktop
by opensuse-security＠opensuse.org 14 Sep '19

14 Sep '19

openSUSE Security Update: Security update for rdesktop ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2135-1 Rating: important References: #1121448 Cross-References: CVE-2018-20174 CVE-2018-20175 CVE-2018-20176 CVE-2018-20177 CVE-2018-20178 CVE-2018-20179 CVE-2018-20180 CVE-2018-20181 CVE-2018-20182 CVE-2018-8791 CVE-2018-8792 CVE-2018-8793 CVE-2018-8794 CVE-2018-8795 CVE-2018-8796 CVE-2018-8797 CVE-2018-8798 CVE-2018-8799 CVE-2018-8800 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes 19 vulnerabilities is now available. Description: This update for rdesktop fixes the following issues: rdesktop was updated to 1.8.6: * Fix protocol code handling new licenses rdesktop was updated to 1.8.5: * Add bounds checking to protocol handling in order to fix many security problems when communicating with a malicious server. rdesktop was updated to 1.8.4 (fix for boo#1121448): * Add rdp_protocol_error function that is used in several fixes * Refactor of process_bitmap_updates * Fix possible integer overflow in s_check_rem() on 32bit arch * Fix memory corruption in process_bitmap_data - CVE-2018-8794 * Fix remote code execution in process_bitmap_data - CVE-2018-8795 * Fix remote code execution in process_plane - CVE-2018-8797 * Fix Denial of Service in mcs_recv_connect_response - CVE-2018-20175 * Fix Denial of Service in mcs_parse_domain_params - CVE-2018-20175 * Fix Denial of Service in sec_parse_crypt_info - CVE-2018-20176 * Fix Denial of Service in sec_recv - CVE-2018-20176 * Fix minor information leak in rdpdr_process - CVE-2018-8791 * Fix Denial of Service in cssp_read_tsrequest - CVE-2018-8792 * Fix remote code execution in cssp_read_tsrequest - CVE-2018-8793 * Fix Denial of Service in process_bitmap_data - CVE-2018-8796 * Fix minor information leak in rdpsnd_process_ping - CVE-2018-8798 * Fix Denial of Service in process_secondary_order - CVE-2018-8799 * Fix remote code execution in in ui_clip_handle_data - CVE-2018-8800 * Fix major information leak in ui_clip_handle_data - CVE-2018-20174 * Fix memory corruption in rdp_in_unistr - CVE-2018-20177 * Fix Denial of Service in process_demand_active - CVE-2018-20178 * Fix remote code execution in lspci_process - CVE-2018-20179 * Fix remote code execution in rdpsnddbg_process - CVE-2018-20180 * Fix remote code execution in seamless_process - CVE-2018-20181 * Fix remote code execution in seamless_process_line - CVE-2018-20182 * Fix building against OpenSSL 1.1 - remove obsolete patches * rdesktop-Fix-OpenSSL-1.1-compability-issues.patch * rdesktop-Fix-crash-in-rdssl_cert_to_rkey.patch - update changes file * add missing info about bugzilla 1121448 - Added rdesktop-Fix-decryption.patch Patch from https://github.com/rdesktop/rdesktop/pull/334 to fix connections to VirtualBox. - update to 1.8.6 * Fix protocol code handling new licenses - update to 1.8.5 * Add bounds checking to protocol handling in order to fix many security problems when communicating with a malicious server. - Trim redundant wording from description. - Use %make_install. - update to 1.8.4 (fix for boo#1121448) * Add rdp_protocol_error function that is used in several fixes * Refactor of process_bitmap_updates * Fix possible integer overflow in s_check_rem() on 32bit arch * Fix memory corruption in process_bitmap_data - CVE-2018-8794 * Fix remote code execution in process_bitmap_data - CVE-2018-8795 * Fix remote code execution in process_plane - CVE-2018-8797 * Fix Denial of Service in mcs_recv_connect_response - CVE-2018-20175 * Fix Denial of Service in mcs_parse_domain_params - CVE-2018-20175 * Fix Denial of Service in sec_parse_crypt_info - CVE-2018-20176 * Fix Denial of Service in sec_recv - CVE-2018-20176 * Fix minor information leak in rdpdr_process - CVE-2018-8791 * Fix Denial of Service in cssp_read_tsrequest - CVE-2018-8792 * Fix remote code execution in cssp_read_tsrequest - CVE-2018-8793 * Fix Denial of Service in process_bitmap_data - CVE-2018-8796 * Fix minor information leak in rdpsnd_process_ping - CVE-2018-8798 * Fix Denial of Service in process_secondary_order - CVE-2018-8799 * Fix remote code execution in in ui_clip_handle_data - CVE-2018-8800 * Fix major information leak in ui_clip_handle_data - CVE-2018-20174 * Fix memory corruption in rdp_in_unistr - CVE-2018-20177 * Fix Denial of Service in process_demand_active - CVE-2018-20178 * Fix remote code execution in lspci_process - CVE-2018-20179 * Fix remote code execution in rdpsnddbg_process - CVE-2018-20180 * Fix remote code execution in seamless_process - CVE-2018-20181 * Fix remote code execution in seamless_process_line - CVE-2018-20182 * Fix building against OpenSSL 1.1 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2135=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2135=1 Package List: - openSUSE Leap 15.1 (x86_64): rdesktop-1.8.6-lp151.2.3.1 rdesktop-debuginfo-1.8.6-lp151.2.3.1 rdesktop-debugsource-1.8.6-lp151.2.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): rdesktop-1.8.6-bp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-20174.html https://www.suse.com/security/cve/CVE-2018-20175.html https://www.suse.com/security/cve/CVE-2018-20176.html https://www.suse.com/security/cve/CVE-2018-20177.html https://www.suse.com/security/cve/CVE-2018-20178.html https://www.suse.com/security/cve/CVE-2018-20179.html https://www.suse.com/security/cve/CVE-2018-20180.html https://www.suse.com/security/cve/CVE-2018-20181.html https://www.suse.com/security/cve/CVE-2018-20182.html https://www.suse.com/security/cve/CVE-2018-8791.html https://www.suse.com/security/cve/CVE-2018-8792.html https://www.suse.com/security/cve/CVE-2018-8793.html https://www.suse.com/security/cve/CVE-2018-8794.html https://www.suse.com/security/cve/CVE-2018-8795.html https://www.suse.com/security/cve/CVE-2018-8796.html https://www.suse.com/security/cve/CVE-2018-8797.html https://www.suse.com/security/cve/CVE-2018-8798.html https://www.suse.com/security/cve/CVE-2018-8799.html https://www.suse.com/security/cve/CVE-2018-8800.html https://bugzilla.suse.com/1121448

1 0

openSUSE-RU-2019:2132-1: moderate: Recommended update for virtualbox
by maintenance＠opensuse.org 14 Sep '19

14 Sep '19

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2132-1 Rating: moderate References: #1142955 #1142995 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for virtualbox fixes the following issues: Version update to 6.0.12 (released September 03 2019 by Oracle) This is a maintenance release. The following items were fixed and/or added: - OCI export: handle empty disk image correctly - API: fix potential crash when using the medium I/O functionality - VBoxManage: fixed documentation of VBoxManage modifyvm uarttype documentation (bug #18759) - Network: scrub inbound TCP URG pointer, working around incorrect OOB handling - USB: Improved identification of power-saved devices on Windows hosts - Audio: in the AC97 work around buggy guest drivers which reprogram the sampling rate, breaking audio in and/or audio out - Linux host and guest: fix kernel module build for SLES 12 SP4 kernel - 3D: fixed state saving and loading when the VBoxVGA graphics adapter is used with 3D enabled (bug #18802, 6.0.10 regression) - Windows guests: fixed mouse cursor visibility updating - Windows guests: fixed graphics corruption in Windows 10 search menu with VBoxSVGA adapter - Windows guests: fixed dwm.exe crashes related to the WDDM driver for VBoxSVGA adapter when the VM has lots of RAM - MacOS Guest Additions fail to start in 6.0.10 (bug #18793) - Windows guests: fixed crashes when using shared folders (bug #18766) - Linux guests: unprivileged users unable to create files inside shared folders (bug #18737) - Linux guests: improve compatibility of vboxvideo.ko kernel module build logic (bug #18869) - Merge host kmp and guest kmp into a single kmp. The existence of two different kernel module packages is believed to be the reason that it is possible for a new kernel not to include the necessary kernel modules (boo#1142955). - Script vboxdrv.sh, which is called from the systemd service file, incorrectly called a routine that does not exist when the kernel modules were not available. This call is changed to /sbin/vboxconfig that will build the modules if the requisite packages are available. If that is not true, the systemctl status vboxdrv will list the command needed to load the missing packages. This change address part of boo#1142995. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2132=1 Package List: - openSUSE Leap 15.1 (noarch): virtualbox-guest-desktop-icons-6.0.12-lp151.2.9.1 virtualbox-guest-source-6.0.12-lp151.2.9.1 virtualbox-host-source-6.0.12-lp151.2.9.1 - openSUSE Leap 15.1 (x86_64): python3-virtualbox-6.0.12-lp151.2.9.1 python3-virtualbox-debuginfo-6.0.12-lp151.2.9.1 virtualbox-6.0.12-lp151.2.9.1 virtualbox-debuginfo-6.0.12-lp151.2.9.1 virtualbox-debugsource-6.0.12-lp151.2.9.1 virtualbox-devel-6.0.12-lp151.2.9.1 virtualbox-guest-tools-6.0.12-lp151.2.9.1 virtualbox-guest-tools-debuginfo-6.0.12-lp151.2.9.1 virtualbox-guest-x11-6.0.12-lp151.2.9.1 virtualbox-guest-x11-debuginfo-6.0.12-lp151.2.9.1 virtualbox-kmp-default-6.0.12_k4.12.14_lp151.28.13-lp151.2.9.1 virtualbox-kmp-default-debuginfo-6.0.12_k4.12.14_lp151.28.13-lp151.2.9.1 virtualbox-qt-6.0.12-lp151.2.9.1 virtualbox-qt-debuginfo-6.0.12-lp151.2.9.1 virtualbox-vnc-6.0.12-lp151.2.9.1 virtualbox-websrv-6.0.12-lp151.2.9.1 virtualbox-websrv-debuginfo-6.0.12-lp151.2.9.1 References: https://bugzilla.suse.com/1142955 https://bugzilla.suse.com/1142995

1 0

openSUSE-SU-2019:2131-1: moderate: Security update for python-urllib3
by opensuse-security＠opensuse.org 14 Sep '19

14 Sep '19

openSUSE Security Update: Security update for python-urllib3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2131-1 Rating: moderate References: #1119376 #1129071 #1132663 #1132900 Cross-References: CVE-2018-20060 CVE-2019-11236 CVE-2019-11324 CVE-2019-9740 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for python-urllib3 fixes the following issues: Security issues fixed: - CVE-2019-9740: Fixed CRLF injection issue (bsc#1129071). - CVE-2019-11324: Fixed invalid CA certificat verification (bsc#1132900). - CVE-2019-11236: Fixed CRLF injection via request parameter (bsc#1132663). - CVE-2018-20060: Remove Authorization header when redirecting cross-host (bsc#1119376). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2131=1 Package List: - openSUSE Leap 15.0 (noarch): python2-urllib3-1.22-lp150.5.3.1 python3-urllib3-1.22-lp150.5.3.1 References: https://www.suse.com/security/cve/CVE-2018-20060.html https://www.suse.com/security/cve/CVE-2019-11236.html https://www.suse.com/security/cve/CVE-2019-11324.html https://www.suse.com/security/cve/CVE-2019-9740.html https://bugzilla.suse.com/1119376 https://bugzilla.suse.com/1129071 https://bugzilla.suse.com/1132663 https://bugzilla.suse.com/1132900

1 0

openSUSE-SU-2019:2130-1: moderate: Security update for go1.12
by opensuse-security＠opensuse.org 14 Sep '19

14 Sep '19

openSUSE Security Update: Security update for go1.12 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2130-1 Rating: moderate References: #1139210 #1141689 #1146111 #1146115 #1146123 Cross-References: CVE-2019-14809 CVE-2019-9512 CVE-2019-9514 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has two fixes is now available. Description: This update for go1.12 fixes the following issues: Security issues fixed: - CVE-2019-9512: Fixed HTTP/2 flood using PING frames that results in unbounded memory growth (bsc#1146111). - CVE-2019-9514: Fixed HTTP/2 implementation that is vulnerable to a reset flood, potentially leading to a denial of service (bsc#1146115). - CVE-2019-14809: Fixed malformed hosts in URLs that leads to authorization bypass (bsc#1146123). Bugfixes: - Update to go version 1.12.9 (bsc#1141689). - Adding Web Assembly stuff from misc/wasm (bsc#1139210). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2130=1 Package List: - openSUSE Leap 15.1 (x86_64): go1.12-1.12.9-lp151.2.21.1 go1.12-doc-1.12.9-lp151.2.21.1 go1.12-race-1.12.9-lp151.2.21.1 References: https://www.suse.com/security/cve/CVE-2019-14809.html https://www.suse.com/security/cve/CVE-2019-9512.html https://www.suse.com/security/cve/CVE-2019-9514.html https://bugzilla.suse.com/1139210 https://bugzilla.suse.com/1141689 https://bugzilla.suse.com/1146111 https://bugzilla.suse.com/1146115 https://bugzilla.suse.com/1146123

1 0

openSUSE-SU-2019:2129-1: moderate: Security update for libmirage
by opensuse-security＠opensuse.org 14 Sep '19

14 Sep '19

openSUSE Security Update: Security update for libmirage ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2129-1 Rating: moderate References: #1148728 Cross-References: CVE-2019-15757 Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libmirage fixes the following issues: Security issues fixed: - CVE-2019-15757: Fixed NULL pointer dereference in the NRG parser (boo#1148728). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2129=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2129=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): libmirage-3_2-3.2.2-bp151.4.6.1 libmirage-3_2-debuginfo-3.2.2-bp151.4.6.1 libmirage-debuginfo-3.2.2-bp151.4.6.1 libmirage-debugsource-3.2.2-bp151.4.6.1 libmirage-devel-3.2.2-bp151.4.6.1 libmirage11-3.2.2-bp151.4.6.1 libmirage11-debuginfo-3.2.2-bp151.4.6.1 typelib-1_0-libmirage-3_2-3.2.2-bp151.4.6.1 - openSUSE Backports SLE-15-SP1 (noarch): libmirage-data-3.2.2-bp151.4.6.1 libmirage-lang-3.2.2-bp151.4.6.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): libmirage-3_2-3.2.2-bp150.3.6.1 libmirage-devel-3.2.2-bp150.3.6.1 libmirage11-3.2.2-bp150.3.6.1 typelib-1_0-libmirage-3_2-3.2.2-bp150.3.6.1 - openSUSE Backports SLE-15 (noarch): libmirage-data-3.2.2-bp150.3.6.1 libmirage-lang-3.2.2-bp150.3.6.1 References: https://www.suse.com/security/cve/CVE-2019-15757.html https://bugzilla.suse.com/1148728

1 0

openSUSE-SU-2019:2128-1: moderate: Security update for srt
by opensuse-security＠opensuse.org 13 Sep '19

13 Sep '19

openSUSE Security Update: Security update for srt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2128-1 Rating: moderate References: #1148844 Cross-References: CVE-2019-15784 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: srt was updated to version 1.3.4. Security issues fixed: * CVE-2019-15784: avoid a potential array overflow. (boo#1148844) * New binary: srt-tunnel * srt-multiplexer binary is now a testing application and thus is dropped from our package. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2128=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): libsrt1-1.3.4-bp151.3.3.1 srt-1.3.4-bp151.3.3.1 srt-devel-1.3.4-bp151.3.3.1 - openSUSE Backports SLE-15-SP1 (aarch64_ilp32): libsrt1-64bit-1.3.4-bp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-15784.html https://bugzilla.suse.com/1148844

1 0

openSUSE-RU-2019:2126-1: moderate: Recommended update for pesign
by maintenance＠opensuse.org 12 Sep '19

12 Sep '19

openSUSE Recommended Update: Recommended update for pesign ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2126-1 Rating: moderate References: #1144441 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pesign contains the following fixes: - Fix the build failure with NSS 3.44. (bsc#1144441) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2126=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): pesign-0.112-lp150.3.6.1 pesign-debuginfo-0.112-lp150.3.6.1 pesign-debugsource-0.112-lp150.3.6.1 References: https://bugzilla.suse.com/1144441

1 0