September 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:2113-1: moderate: Recommended update for pinentry
by maintenance＠opensuse.org 10 Sep '19

10 Sep '19

openSUSE Recommended Update: Recommended update for pinentry ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2113-1 Rating: moderate References: #1141883 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pinentry fixes the following issues: - Fix a dangling pointer in qt/main.cpp that caused crashes. (bsc#1141883) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2113=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2113=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): pinentry-1.1.0-lp151.4.3.1 pinentry-debuginfo-1.1.0-lp151.4.3.1 pinentry-debugsource-1.1.0-lp151.4.3.1 pinentry-emacs-1.1.0-lp151.4.3.1 pinentry-emacs-debuginfo-1.1.0-lp151.4.3.1 pinentry-fltk-1.1.0-lp151.4.3.1 pinentry-fltk-debuginfo-1.1.0-lp151.4.3.1 pinentry-gnome3-1.1.0-lp151.4.3.1 pinentry-gnome3-debuginfo-1.1.0-lp151.4.3.1 pinentry-gtk2-1.1.0-lp151.4.3.1 pinentry-gtk2-debuginfo-1.1.0-lp151.4.3.1 pinentry-qt5-1.1.0-lp151.4.3.1 pinentry-qt5-debuginfo-1.1.0-lp151.4.3.1 - openSUSE Leap 15.0 (i586 x86_64): pinentry-1.1.0-lp150.3.3.1 pinentry-debuginfo-1.1.0-lp150.3.3.1 pinentry-debugsource-1.1.0-lp150.3.3.1 pinentry-emacs-1.1.0-lp150.3.3.1 pinentry-emacs-debuginfo-1.1.0-lp150.3.3.1 pinentry-fltk-1.1.0-lp150.3.3.1 pinentry-fltk-debuginfo-1.1.0-lp150.3.3.1 pinentry-gnome3-1.1.0-lp150.3.3.1 pinentry-gnome3-debuginfo-1.1.0-lp150.3.3.1 pinentry-gtk2-1.1.0-lp150.3.3.1 pinentry-gtk2-debuginfo-1.1.0-lp150.3.3.1 pinentry-qt5-1.1.0-lp150.3.3.1 pinentry-qt5-debuginfo-1.1.0-lp150.3.3.1 References: https://bugzilla.suse.com/1141883

1 0

openSUSE-SU-2019:2114-1: important: Security update for nodejs10
by opensuse-security＠opensuse.org 10 Sep '19

10 Sep '19

openSUSE Security Update: Security update for nodejs10 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2114-1 Rating: important References: #1146090 #1146091 #1146093 #1146094 #1146095 #1146097 #1146099 #1146100 Cross-References: CVE-2019-9511 CVE-2019-9512 CVE-2019-9513 CVE-2019-9514 CVE-2019-9515 CVE-2019-9516 CVE-2019-9517 CVE-2019-9518 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for nodejs10 to version 10.16.3 fixes the following issues: Security issues fixed: - CVE-2019-9511: Fixed HTTP/2 implementations that are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service (bsc#1146091). - CVE-2019-9512: Fixed HTTP/2 flood using PING frames results in unbounded memory growth (bsc#1146099). - CVE-2019-9513: Fixed HTTP/2 implementation that is vulnerable to resource loops, potentially leading to a denial of service. (bsc#1146094). - CVE-2019-9514: Fixed HTTP/2 implementation that is vulnerable to a reset flood, potentially leading to a denial of service (bsc#1146095). - CVE-2019-9515: Fixed HTTP/2 flood using SETTINGS frames results in unbounded memory growth (bsc#1146100). - CVE-2019-9516: Fixed HTTP/2 implementation that is vulnerable to a header leak, potentially leading to a denial of service (bsc#1146090). - CVE-2019-9517: Fixed HTTP/2 implementations that are vulnerable to unconstrained interal data buffering (bsc#1146097). - CVE-2019-9518: Fixed HTTP/2 implementation that is vulnerable to a flood of empty frames, potentially leading to a denial of service (bsc#1146093). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2114=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2114=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): nodejs10-10.16.3-lp151.2.6.1 nodejs10-debuginfo-10.16.3-lp151.2.6.1 nodejs10-debugsource-10.16.3-lp151.2.6.1 nodejs10-devel-10.16.3-lp151.2.6.1 npm10-10.16.3-lp151.2.6.1 - openSUSE Leap 15.1 (noarch): nodejs10-docs-10.16.3-lp151.2.6.1 - openSUSE Leap 15.0 (x86_64): nodejs10-10.16.3-lp150.5.1 nodejs10-debuginfo-10.16.3-lp150.5.1 nodejs10-debugsource-10.16.3-lp150.5.1 nodejs10-devel-10.16.3-lp150.5.1 npm10-10.16.3-lp150.5.1 - openSUSE Leap 15.0 (noarch): nodejs10-docs-10.16.3-lp150.5.1 References: https://www.suse.com/security/cve/CVE-2019-9511.html https://www.suse.com/security/cve/CVE-2019-9512.html https://www.suse.com/security/cve/CVE-2019-9513.html https://www.suse.com/security/cve/CVE-2019-9514.html https://www.suse.com/security/cve/CVE-2019-9515.html https://www.suse.com/security/cve/CVE-2019-9516.html https://www.suse.com/security/cve/CVE-2019-9517.html https://www.suse.com/security/cve/CVE-2019-9518.html https://bugzilla.suse.com/1146090 https://bugzilla.suse.com/1146091 https://bugzilla.suse.com/1146093 https://bugzilla.suse.com/1146094 https://bugzilla.suse.com/1146095 https://bugzilla.suse.com/1146097 https://bugzilla.suse.com/1146099 https://bugzilla.suse.com/1146100

1 0

openSUSE-RU-2019:2116-1: moderate: Recommended update for libimobiledevice
by maintenance＠opensuse.org 10 Sep '19

10 Sep '19

openSUSE Recommended Update: Recommended update for libimobiledevice ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2116-1 Rating: moderate References: #1103546 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libimobiledevice fixes the following issues: - Fixes a double free with OpenSSL 1.1 bug (bsc#1103546) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2116=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): imobiledevice-tools-1.2.0+git20170122.45fda81-lp151.3.3.1 imobiledevice-tools-debuginfo-1.2.0+git20170122.45fda81-lp151.3.3.1 libimobiledevice-debugsource-1.2.0+git20170122.45fda81-lp151.3.3.1 libimobiledevice-devel-1.2.0+git20170122.45fda81-lp151.3.3.1 libimobiledevice6-1.2.0+git20170122.45fda81-lp151.3.3.1 libimobiledevice6-debuginfo-1.2.0+git20170122.45fda81-lp151.3.3.1 python-imobiledevice-1.2.0+git20170122.45fda81-lp151.3.3.1 python-imobiledevice-debuginfo-1.2.0+git20170122.45fda81-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): libimobiledevice6-32bit-1.2.0+git20170122.45fda81-lp151.3.3.1 libimobiledevice6-32bit-debuginfo-1.2.0+git20170122.45fda81-lp151.3.3.1 References: https://bugzilla.suse.com/1103546

1 0

openSUSE-SU-2019:2115-1: important: Security update for nodejs8
by opensuse-security＠opensuse.org 10 Sep '19

10 Sep '19

openSUSE Security Update: Security update for nodejs8 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2115-1 Rating: important References: #1144919 #1146090 #1146091 #1146093 #1146094 #1146095 #1146097 #1146099 #1146100 Cross-References: CVE-2019-9511 CVE-2019-9512 CVE-2019-9513 CVE-2019-9514 CVE-2019-9515 CVE-2019-9516 CVE-2019-9517 CVE-2019-9518 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves 8 vulnerabilities and has one errata is now available. Description: This update for nodejs8 to version 8.16.1 fixes the following issues: Security issues fixed: - CVE-2019-9511: Fixed HTTP/2 implementations that are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service (bsc#1146091). - CVE-2019-9512: Fixed HTTP/2 flood using PING frames results in unbounded memory growth (bsc#1146099). - CVE-2019-9513: Fixed HTTP/2 implementation that is vulnerable to resource loops, potentially leading to a denial of service. (bsc#1146094). - CVE-2019-9514: Fixed HTTP/2 implementation that is vulnerable to a reset flood, potentially leading to a denial of service (bsc#1146095). - CVE-2019-9515: Fixed HTTP/2 flood using SETTINGS frames results in unbounded memory growth (bsc#1146100). - CVE-2019-9516: Fixed HTTP/2 implementation that is vulnerable to a header leak, potentially leading to a denial of service (bsc#1146090). - CVE-2019-9517: Fixed HTTP/2 implementations that are vulnerable to unconstrained interal data buffering (bsc#1146097). - CVE-2019-9518: Fixed HTTP/2 implementation that is vulnerable to a flood of empty frames, potentially leading to a denial of service (bsc#1146093). Bug fixes: - Fixed that npm resolves its default config file like in all other versions, as /etc/nodejs/npmrc (bsc#1144919). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2115=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2115=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): nodejs8-8.16.1-lp151.2.6.1 nodejs8-debuginfo-8.16.1-lp151.2.6.1 nodejs8-debugsource-8.16.1-lp151.2.6.1 nodejs8-devel-8.16.1-lp151.2.6.1 npm8-8.16.1-lp151.2.6.1 - openSUSE Leap 15.1 (noarch): nodejs8-docs-8.16.1-lp151.2.6.1 - openSUSE Leap 15.0 (i586 x86_64): nodejs8-8.16.1-lp150.2.19.1 nodejs8-debuginfo-8.16.1-lp150.2.19.1 nodejs8-debugsource-8.16.1-lp150.2.19.1 nodejs8-devel-8.16.1-lp150.2.19.1 npm8-8.16.1-lp150.2.19.1 - openSUSE Leap 15.0 (noarch): nodejs8-docs-8.16.1-lp150.2.19.1 References: https://www.suse.com/security/cve/CVE-2019-9511.html https://www.suse.com/security/cve/CVE-2019-9512.html https://www.suse.com/security/cve/CVE-2019-9513.html https://www.suse.com/security/cve/CVE-2019-9514.html https://www.suse.com/security/cve/CVE-2019-9515.html https://www.suse.com/security/cve/CVE-2019-9516.html https://www.suse.com/security/cve/CVE-2019-9517.html https://www.suse.com/security/cve/CVE-2019-9518.html https://bugzilla.suse.com/1144919 https://bugzilla.suse.com/1146090 https://bugzilla.suse.com/1146091 https://bugzilla.suse.com/1146093 https://bugzilla.suse.com/1146094 https://bugzilla.suse.com/1146095 https://bugzilla.suse.com/1146097 https://bugzilla.suse.com/1146099 https://bugzilla.suse.com/1146100

1 0

openSUSE-SU-2019:2109-1: moderate: Security update for SDL_image
by opensuse-security＠opensuse.org 10 Sep '19

10 Sep '19

openSUSE Security Update: Security update for SDL_image ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2109-1 Rating: moderate References: #1124827 #1140421 #1141844 #1143763 #1143764 #1143766 #1143768 Cross-References: CVE-2019-13616 CVE-2019-5052 CVE-2019-5057 CVE-2019-5058 CVE-2019-5059 CVE-2019-5060 CVE-2019-7635 Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for SDL_image fixes the following issues: Update SDL_Image to new snapshot 1.2.12+hg695. Security issues fixed: * TALOS-2019-0821 CVE-2019-5052: exploitable integer overflow vulnerability when loading a PCX file (boo#1140421) * TALOS-2019-0841 CVE-2019-5057: code execution vulnerability in the PCX image-rendering functionality of SDL2_image (boo#1143763) * TALOS-2019-0842 CVE-2019-5058: heap overflow in XCF image rendering can lead to code execution (boo#1143764) * TALOS-2019-0843 CVE-2019-5059: heap overflow in XPM image handling (boo#1143766) * TALOS-2019-0844 CVE-2019-5060: integer overflow in the XPM image (boo#1143768) * CVE-2019-7635: heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c (boo#1124827) * CVE-2019-13616: fix heap buffer overflow when reading a crafted bmp file (boo#1141844). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2109=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2109=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): SDL_image-debugsource-1.2.12+hg695-bp151.4.3.1 libSDL_image-1_2-0-1.2.12+hg695-bp151.4.3.1 libSDL_image-1_2-0-debuginfo-1.2.12+hg695-bp151.4.3.1 libSDL_image-devel-1.2.12+hg695-bp151.4.3.1 - openSUSE Backports SLE-15-SP1 (aarch64_ilp32): libSDL_image-1_2-0-64bit-1.2.12+hg695-bp151.4.3.1 libSDL_image-1_2-0-64bit-debuginfo-1.2.12+hg695-bp151.4.3.1 libSDL_image-devel-64bit-1.2.12+hg695-bp151.4.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): libSDL_image-1_2-0-1.2.12+hg695-bp150.3.3.1 libSDL_image-devel-1.2.12+hg695-bp150.3.3.1 - openSUSE Backports SLE-15 (aarch64_ilp32): libSDL_image-1_2-0-64bit-1.2.12+hg695-bp150.3.3.1 libSDL_image-devel-64bit-1.2.12+hg695-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-13616.html https://www.suse.com/security/cve/CVE-2019-5052.html https://www.suse.com/security/cve/CVE-2019-5057.html https://www.suse.com/security/cve/CVE-2019-5058.html https://www.suse.com/security/cve/CVE-2019-5059.html https://www.suse.com/security/cve/CVE-2019-5060.html https://www.suse.com/security/cve/CVE-2019-7635.html https://bugzilla.suse.com/1124827 https://bugzilla.suse.com/1140421 https://bugzilla.suse.com/1141844 https://bugzilla.suse.com/1143763 https://bugzilla.suse.com/1143764 https://bugzilla.suse.com/1143766 https://bugzilla.suse.com/1143768

1 0

openSUSE-RU-2019:2111-1: moderate: Recommended update for ibus-libpinyin
by maintenance＠opensuse.org 10 Sep '19

10 Sep '19

openSUSE Recommended Update: Recommended update for ibus-libpinyin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2111-1 Rating: moderate References: #1112998 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ibus-libpinyin fixes the following issues: ibus-libpinyin was updated to 1.11.1: * Use gettext * Add emoji-candidate option (boo#1112998) * Fix SuggestionEditor ibus-libpinyin was updated version to 1.11.0: * Fix keypad decimal * Fix emoji candidates * Support configurable opencc config Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2111=1 Package List: - openSUSE Leap 15.1 (x86_64): ibus-libpinyin-1.11.1-lp151.2.3.1 ibus-libpinyin-debuginfo-1.11.1-lp151.2.3.1 ibus-libpinyin-debugsource-1.11.1-lp151.2.3.1 References: https://bugzilla.suse.com/1112998

1 0

openSUSE-RU-2019:2112-1: moderate: Recommended update for libimobiledevice
by maintenance＠opensuse.org 10 Sep '19

10 Sep '19

openSUSE Recommended Update: Recommended update for libimobiledevice ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2112-1 Rating: moderate References: #1103546 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libimobiledevice fixes the following issues: - Fixes a double free with OpenSSL 1.1 bug (bsc#1103546) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2112=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): imobiledevice-tools-1.2.0+git20170122.45fda81-lp150.2.3.1 imobiledevice-tools-debuginfo-1.2.0+git20170122.45fda81-lp150.2.3.1 libimobiledevice-debugsource-1.2.0+git20170122.45fda81-lp150.2.3.1 libimobiledevice-devel-1.2.0+git20170122.45fda81-lp150.2.3.1 libimobiledevice6-1.2.0+git20170122.45fda81-lp150.2.3.1 libimobiledevice6-debuginfo-1.2.0+git20170122.45fda81-lp150.2.3.1 python-imobiledevice-1.2.0+git20170122.45fda81-lp150.2.3.1 python-imobiledevice-debuginfo-1.2.0+git20170122.45fda81-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libimobiledevice6-32bit-1.2.0+git20170122.45fda81-lp150.2.3.1 libimobiledevice6-32bit-debuginfo-1.2.0+git20170122.45fda81-lp150.2.3.1 References: https://bugzilla.suse.com/1103546

1 0

openSUSE-SU-2019:2108-1: moderate: Security update for SDL2_image
by opensuse-security＠opensuse.org 10 Sep '19

10 Sep '19

openSUSE Security Update: Security update for SDL2_image ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2108-1 Rating: moderate References: #1135787 #1135789 #1135796 #1135806 #1136101 #1140419 #1140421 #1141844 #1143763 #1143764 #1143766 #1143768 Cross-References: CVE-2019-12217 CVE-2019-12218 CVE-2019-12220 CVE-2019-12221 CVE-2019-12222 CVE-2019-13616 CVE-2019-5051 CVE-2019-5052 CVE-2019-5057 CVE-2019-5058 CVE-2019-5059 CVE-2019-5060 Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: This update for SDL2_image fixes the following issues: Update to new upstream release 2.0.5. Security issues fixed: * TALOS-2019-0820 CVE-2019-5051: exploitable heap-based buffer overflow vulnerability when loading a PCX file (boo#1140419) * TALOS-2019-0821 CVE-2019-5052: exploitable integer overflow vulnerability when loading a PCX file (boo#1140421) * TALOS-2019-0841 CVE-2019-5057: code execution vulnerability in the PCX image-rendering functionality of SDL2_image (boo#1143763) * TALOS-2019-0842 CVE-2019-5058: heap overflow in XCF image rendering can lead to code execution (boo#1143764) * TALOS-2019-0843 CVE-2019-5059: heap overflow in XPM image (boo#1143766) * TALOS-2019-0844 CVE-2019-5060: integer overflow in the XPM image (boo#1143768) Not mentioned by upstream, but issues seemingly further fixed: * CVE-2019-12218: NULL pointer dereference in the SDL2_image function IMG_LoadPCX_RW (boo#1135789) * CVE-2019-12217: NULL pointer dereference in the SDL stdio_read function (boo#1135787) * CVE-2019-12220: SDL_image triggers an out-of-bounds read in the SDL function SDL_FreePalette_REAL (boo#1135806) * CVE-2019-12221: a SEGV caused by SDL_image in SDL function SDL_free_REAL in stdlib/SDL_malloc.c (boo#1135796) * CVE-2019-12222: out-of-bounds read triggered by SDL_image in the function SDL_InvalidateMap at video/SDL_pixels.c (boo#1136101) * CVE-2019-13616: fix heap buffer overflow when reading a crafted bmp file (boo#1141844). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2108=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2108=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): SDL2_image-debugsource-2.0.5-bp151.4.3.1 libSDL2_image-2_0-0-2.0.5-bp151.4.3.1 libSDL2_image-2_0-0-debuginfo-2.0.5-bp151.4.3.1 libSDL2_image-devel-2.0.5-bp151.4.3.1 - openSUSE Backports SLE-15-SP1 (aarch64_ilp32): libSDL2_image-2_0-0-64bit-2.0.5-bp151.4.3.1 libSDL2_image-2_0-0-64bit-debuginfo-2.0.5-bp151.4.3.1 libSDL2_image-devel-64bit-2.0.5-bp151.4.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): libSDL2_image-2_0-0-2.0.5-bp150.3.6.1 libSDL2_image-devel-2.0.5-bp150.3.6.1 - openSUSE Backports SLE-15 (aarch64_ilp32): libSDL2_image-2_0-0-64bit-2.0.5-bp150.3.6.1 libSDL2_image-devel-64bit-2.0.5-bp150.3.6.1 References: https://www.suse.com/security/cve/CVE-2019-12217.html https://www.suse.com/security/cve/CVE-2019-12218.html https://www.suse.com/security/cve/CVE-2019-12220.html https://www.suse.com/security/cve/CVE-2019-12221.html https://www.suse.com/security/cve/CVE-2019-12222.html https://www.suse.com/security/cve/CVE-2019-13616.html https://www.suse.com/security/cve/CVE-2019-5051.html https://www.suse.com/security/cve/CVE-2019-5052.html https://www.suse.com/security/cve/CVE-2019-5057.html https://www.suse.com/security/cve/CVE-2019-5058.html https://www.suse.com/security/cve/CVE-2019-5059.html https://www.suse.com/security/cve/CVE-2019-5060.html https://bugzilla.suse.com/1135787 https://bugzilla.suse.com/1135789 https://bugzilla.suse.com/1135796 https://bugzilla.suse.com/1135806 https://bugzilla.suse.com/1136101 https://bugzilla.suse.com/1140419 https://bugzilla.suse.com/1140421 https://bugzilla.suse.com/1141844 https://bugzilla.suse.com/1143763 https://bugzilla.suse.com/1143764 https://bugzilla.suse.com/1143766 https://bugzilla.suse.com/1143768

1 0

openSUSE-SU-2019:2110-1: moderate: Security update for python-Twisted
by opensuse-security＠opensuse.org 10 Sep '19

10 Sep '19

openSUSE Security Update: Security update for python-Twisted ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2110-1 Rating: moderate References: #1138461 Cross-References: CVE-2019-12855 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-Twisted fixes the following issues: Security issue fixed: - CVE-2019-12855: Fixed TLS certificate verification to protecting against MITM attacks (bsc#1138461). This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2110=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): python-Twisted-doc-17.9.0-bp150.4.6.1 python2-Twisted-17.9.0-bp150.4.6.1 python3-Twisted-17.9.0-bp150.4.6.1 References: https://www.suse.com/security/cve/CVE-2019-12855.html https://bugzilla.suse.com/1138461

1 0

openSUSE-SU-2019:2107-1: important: Recommended update for opera
by opensuse-security＠opensuse.org 10 Sep '19

10 Sep '19

openSUSE Security Update: Recommended update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2107-1 Rating: important References: Affected Products: openSUSE Leap 15.1:NonFree openSUSE Leap 15.0:NonFree ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for opera fixes the following issues: Opera was updated to version 63.0.3368.66: - CHR-7525 Update chromium on desktop-stable-76-3368 to 76.0.3809.132 - DNA-74031 Download indicator doesn’t match progress - DNA-77042 Something went wrong message in crypto wallet in private window - DNA-79137 Crash at opera::installer::OptionsScreen:: OnLanguageChanged() - DNA-79683 Installer crashes when showing progress - DNA-79757 Line divider under address bar disappears after opening and closing Bookmarks Bar - DNA-80012 Zoom popup appears each time clicking ‘heart’ icon - DNA-80110 Bug when changing the install path in installer - DNA-80417 [assistant] Crash at opera::avro::event_driven::StatSenderImpl::NetworkThread:: SetTrafficAllowed(bool) - DNA-80422 Continue shopping section is too close to Speed Dial tiles when tiles are big - DNA-80463 Add shadow to shopping tiles - DNA-78143 Load async resources before rendering the page - DNA-79102 Make AU to be always server IPC endpoint when new AU logic is enabled - DNA-80193 Magnifying glass icon doesn’t match the search box boundaries in settings and extensions - DNA-80416 Crash at opera::assistant::ProcessMonitorImpl:: ObserveProcess(std::__1::basic_string const&, opera::assistant:: ProcessMonitor::Observer*) - DNA-79558 Add database for continue shopping feature - DNA-79560 Create hidden runtime flag #continue-shopping - DNA-79702 Create Continue Shopping service - DNA-79786 Fix database backend for deleting the partner offer - DNA-80193 Magnifying glass icon doesn’t match the search box boundaries in settings and extensions - DNA-80237 Prevent data collection when feature is off - DNA-80244 Introduce another feature flag for changing the default value of folded state - DNA-79558 Add database for continue shopping feature - DNA-79560 Create hidden runtime flag #continue-shopping - DNA-79702 Create Continue Shopping service - DNA-79786 Fix database backend for deleting the partner offer - DNA-80193 Magnifying glass icon doesn’t match the search box boundaries in settings and extensions - DNA-80237 Prevent data collection when feature is off - DNA-80244 Introduce another feature flag for changing the default value of folded state - DNA-79560 Create hidden runtime flag #continue-shopping - DNA-79702 Create Continue Shopping service - DNA-79786 Fix database backend for deleting the partner offer - DNA-80193 Magnifying glass icon doesn’t match the search box boundaries in settings and extensions - DNA-80237 Prevent data collection when feature is off - DNA-80244 Introduce another feature flag for changing the default value of folded state - DNA-79063 Address bar icons are hardly visible in private window in light mode - DNA-79274 No warning notification on quitting Opera with multiple tabs open after update - DNA-80103 Investigate best ICECC_THREADS for faster Mac builds - DNA-80105 O63 translations (08.08.2019) - DNA-80219 DCHECK at ExtensionDownloader::HandleManifestResults - DNA-80330 [My Flow] The QR code and connection code is not visible for some people - DNA-79569 Don’t provide default value for titleTextColor in opr.wallpapersAPI - DNA-80221 Change channel to “stable” in permissions features for wallpapersPrivate - DNA-80230 Promote O63 to stable Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1:NonFree: zypper in -t patch openSUSE-2019-2107=1 - openSUSE Leap 15.0:NonFree: zypper in -t patch openSUSE-2019-2107=1 Package List: - openSUSE Leap 15.1:NonFree (x86_64): opera-63.0.3368.66-lp151.2.6.1 - openSUSE Leap 15.0:NonFree (x86_64): opera-63.0.3368.66-lp150.2.18.1 References:

1 0