December 2019 - openSUSE Security Announce

[security-announce] openSUSE-SU-2019:2710-1: moderate: Security update for spectre-meltdown-checker
by opensuse-security＠opensuse.org 31 Dec '19

31 Dec '19

openSUSE Security Update: Security update for spectre-meltdown-checker ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2710-1 Rating: moderate References: #1117665 #1139073 Cross-References: CVE-2018-12207 CVE-2019-11135 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for spectre-meltdown-checker fixes the following issues: - feat: implement TAA detection (CVE-2019-11135 bsc#1139073) - feat: implement MCEPSC / iTLB Multihit detection (CVE-2018-12207 bsc#1117665) - feat: taa: add TSX_CTRL MSR detection in hardware info - feat: fwdb: use both Intel GitHub repo and MCEdb to build our firmware version database - feat: use --live with --kernel/--config/--map to override file detection in live mode - enh: rework the vuln logic of MDS with --paranoid (fixes #307) - enh: explain that Enhanced IBRS is better for performance than classic IBRS - enh: kernel: autodetect customized arch kernels from cmdline - enh: kernel decompression: better tolerance against missing tools - enh: mock: implement reading from /proc/cmdline - fix: variant3a: Silvermont CPUs are not vulnerable to variant 3a - fix: lockdown: detect Red Hat locked down kernels (impacts MSR writes) - fix: lockdown: detect locked down mode in vanilla 5.4+ kernels - fix: sgx: on locked down kernels, fallback to CPUID bit for detection - fix: fwdb: builtin version takes precedence if the local cached version is older - fix: pteinv: don't check kernel image if not available - fix: silence useless error from grep (fixes #322) - fix: msr: fix msr module detection under Ubuntu 19.10 (fixes #316) - fix: mocking value for read_msr - chore: rename mcedb cmdline parameters to fwdb, and change db version scheme - chore: fwdb: update to v130.20191104+i20191027 - chore: add GitHub check workflow This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2710=1 Package List: - openSUSE Leap 15.1 (x86_64): spectre-meltdown-checker-0.43-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-12207.html https://www.suse.com/security/cve/CVE-2019-11135.html https://bugzilla.suse.com/1117665 https://bugzilla.suse.com/1139073 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2712-1: important: Security update for chromium
by opensuse-security＠opensuse.org 31 Dec '19

31 Dec '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2712-1 Rating: important References: #1159498 Cross-References: CVE-2019-13767 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for chromium fixes the following issues: Chromium was updated to 79.0.3945.88: - CVE-2019-13767: Fixed a use after free in media picker (boo#1159498) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2712=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2712=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-2712=1 Package List: - openSUSE Leap 15.1 (x86_64): chromedriver-79.0.3945.88-lp151.2.54.1 chromedriver-debuginfo-79.0.3945.88-lp151.2.54.1 chromium-79.0.3945.88-lp151.2.54.1 chromium-debuginfo-79.0.3945.88-lp151.2.54.1 chromium-debugsource-79.0.3945.88-lp151.2.54.1 - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-79.0.3945.88-bp151.3.38.1 chromedriver-debuginfo-79.0.3945.88-bp151.3.38.1 chromium-79.0.3945.88-bp151.3.38.1 chromium-debuginfo-79.0.3945.88-bp151.3.38.1 chromium-debugsource-79.0.3945.88-bp151.3.38.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 x86_64): chromedriver-79.0.3945.88-22.1 chromium-79.0.3945.88-22.1 References: https://www.suse.com/security/cve/CVE-2019-13767.html https://bugzilla.suse.com/1159498 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2709-1: moderate: Security update for LibreOffice
by opensuse-security＠opensuse.org 31 Dec '19

31 Dec '19

openSUSE Security Update: Security update for LibreOffice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2709-1 Rating: moderate References: #1061210 #1105173 #1144522 #1152684 Cross-References: CVE-2019-9853 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has three fixes is now available. Description: This update libreoffice and libraries fixes the following issues: LibreOffice was updated to 6.3.3 (jsc#SLE-8705), bringing many bug and stability fixes. More information for the 6.3 release at: https://wiki.documentfoundation.org/ReleaseNotes/6.3 Security issue fixed: - CVE-2019-9853: Fixed an issue where by executing macros, the security settings could have been bypassed (bsc#1152684). Other issues addressed: - Dropped disable-kde4 switch, since it is no longer known by configure - Disabled gtk2 because it will be removed in future releases - librelogo is now a standalone sub-package (bsc#1144522). - Partial fixes for an issue where Table(s) from DOCX showed wrong position or color (bsc#1061210). cmis-client was updated to 0.5.2: * Removed header for Uuid's sha1 header(bsc#1105173). * Fixed Google Drive login * Added support for Google Drive two-factor authentication * Fixed access to SharePoint root folder * Limited the maximal number of redirections to 20 * Switched library implementation to C++11 (the API remains C++98-compatible) * Fixed encoding of OAuth2 credentials * Dropped cppcheck run from "make check". A new "make cppcheck" target was created for it * Added proper API symbol exporting * Speeded up building of tests a bit * Fixed a few issues found by coverity and cppcheck libixion was updated to 0.15.0: * Updated for new liborcus * Switched to spdlog for compile-time debug log outputs * Fixed various issues libmwaw was updated 0.3.15: * Fixed fuzzing issues liborcus was updated to 0.15.3: * Fixed various xml related bugs * Improved performance * Fixed multiple parser issues * Added map and structure mode to orcus-json * Other improvements and fixes mdds was updated to 1.5.0: * API changed to 1.5 * Moved the API incompatibility notes from README to the rst doc. * Added the overview section for flat_segment_tree. myspell-dictionaries was updated to 20191016: * Updated Slovenian thesaurus * Updated the da_DK dictionary * Removed the abbreviations from Thai hunspell dictionary * Updated the English dictionaries * Fixed the logo management for "ca" spdlog was updated to 0.16.3: * Fixed sleep issue under MSVC that happens when changing the clock backwards * Ensured that macros always expand to expressions * Added global flush_on function This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2709=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): myspell-dictionaries-20191016-lp151.2.6.1 myspell-lightproof-en-20191016-lp151.2.6.1 myspell-lightproof-hu_HU-20191016-lp151.2.6.1 myspell-lightproof-pt_BR-20191016-lp151.2.6.1 myspell-lightproof-ru_RU-20191016-lp151.2.6.1 - openSUSE Leap 15.1 (noarch): libmwaw-devel-doc-0.3.15-lp151.2.3.1 libreoffice-branding-upstream-6.3.3.2-lp151.3.9.1 libreoffice-gdb-pretty-printers-6.3.3.2-lp151.3.9.1 libreoffice-glade-6.3.3.2-lp151.3.9.1 libreoffice-icon-themes-6.3.3.2-lp151.3.9.1 libreoffice-l10n-af-6.3.3.2-lp151.3.9.1 libreoffice-l10n-am-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ar-6.3.3.2-lp151.3.9.1 libreoffice-l10n-as-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ast-6.3.3.2-lp151.3.9.1 libreoffice-l10n-be-6.3.3.2-lp151.3.9.1 libreoffice-l10n-bg-6.3.3.2-lp151.3.9.1 libreoffice-l10n-bn-6.3.3.2-lp151.3.9.1 libreoffice-l10n-bn_IN-6.3.3.2-lp151.3.9.1 libreoffice-l10n-bo-6.3.3.2-lp151.3.9.1 libreoffice-l10n-br-6.3.3.2-lp151.3.9.1 libreoffice-l10n-brx-6.3.3.2-lp151.3.9.1 libreoffice-l10n-bs-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ca-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ca_valencia-6.3.3.2-lp151.3.9.1 libreoffice-l10n-cs-6.3.3.2-lp151.3.9.1 libreoffice-l10n-cy-6.3.3.2-lp151.3.9.1 libreoffice-l10n-da-6.3.3.2-lp151.3.9.1 libreoffice-l10n-de-6.3.3.2-lp151.3.9.1 libreoffice-l10n-dgo-6.3.3.2-lp151.3.9.1 libreoffice-l10n-dsb-6.3.3.2-lp151.3.9.1 libreoffice-l10n-dz-6.3.3.2-lp151.3.9.1 libreoffice-l10n-el-6.3.3.2-lp151.3.9.1 libreoffice-l10n-en-6.3.3.2-lp151.3.9.1 libreoffice-l10n-en_GB-6.3.3.2-lp151.3.9.1 libreoffice-l10n-en_ZA-6.3.3.2-lp151.3.9.1 libreoffice-l10n-eo-6.3.3.2-lp151.3.9.1 libreoffice-l10n-es-6.3.3.2-lp151.3.9.1 libreoffice-l10n-et-6.3.3.2-lp151.3.9.1 libreoffice-l10n-eu-6.3.3.2-lp151.3.9.1 libreoffice-l10n-fa-6.3.3.2-lp151.3.9.1 libreoffice-l10n-fi-6.3.3.2-lp151.3.9.1 libreoffice-l10n-fr-6.3.3.2-lp151.3.9.1 libreoffice-l10n-fy-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ga-6.3.3.2-lp151.3.9.1 libreoffice-l10n-gd-6.3.3.2-lp151.3.9.1 libreoffice-l10n-gl-6.3.3.2-lp151.3.9.1 libreoffice-l10n-gu-6.3.3.2-lp151.3.9.1 libreoffice-l10n-gug-6.3.3.2-lp151.3.9.1 libreoffice-l10n-he-6.3.3.2-lp151.3.9.1 libreoffice-l10n-hi-6.3.3.2-lp151.3.9.1 libreoffice-l10n-hr-6.3.3.2-lp151.3.9.1 libreoffice-l10n-hsb-6.3.3.2-lp151.3.9.1 libreoffice-l10n-hu-6.3.3.2-lp151.3.9.1 libreoffice-l10n-id-6.3.3.2-lp151.3.9.1 libreoffice-l10n-is-6.3.3.2-lp151.3.9.1 libreoffice-l10n-it-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ja-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ka-6.3.3.2-lp151.3.9.1 libreoffice-l10n-kab-6.3.3.2-lp151.3.9.1 libreoffice-l10n-kk-6.3.3.2-lp151.3.9.1 libreoffice-l10n-km-6.3.3.2-lp151.3.9.1 libreoffice-l10n-kmr_Latn-6.3.3.2-lp151.3.9.1 libreoffice-l10n-kn-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ko-6.3.3.2-lp151.3.9.1 libreoffice-l10n-kok-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ks-6.3.3.2-lp151.3.9.1 libreoffice-l10n-lb-6.3.3.2-lp151.3.9.1 libreoffice-l10n-lo-6.3.3.2-lp151.3.9.1 libreoffice-l10n-lt-6.3.3.2-lp151.3.9.1 libreoffice-l10n-lv-6.3.3.2-lp151.3.9.1 libreoffice-l10n-mai-6.3.3.2-lp151.3.9.1 libreoffice-l10n-mk-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ml-6.3.3.2-lp151.3.9.1 libreoffice-l10n-mn-6.3.3.2-lp151.3.9.1 libreoffice-l10n-mni-6.3.3.2-lp151.3.9.1 libreoffice-l10n-mr-6.3.3.2-lp151.3.9.1 libreoffice-l10n-my-6.3.3.2-lp151.3.9.1 libreoffice-l10n-nb-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ne-6.3.3.2-lp151.3.9.1 libreoffice-l10n-nl-6.3.3.2-lp151.3.9.1 libreoffice-l10n-nn-6.3.3.2-lp151.3.9.1 libreoffice-l10n-nr-6.3.3.2-lp151.3.9.1 libreoffice-l10n-nso-6.3.3.2-lp151.3.9.1 libreoffice-l10n-oc-6.3.3.2-lp151.3.9.1 libreoffice-l10n-om-6.3.3.2-lp151.3.9.1 libreoffice-l10n-or-6.3.3.2-lp151.3.9.1 libreoffice-l10n-pa-6.3.3.2-lp151.3.9.1 libreoffice-l10n-pl-6.3.3.2-lp151.3.9.1 libreoffice-l10n-pt_BR-6.3.3.2-lp151.3.9.1 libreoffice-l10n-pt_PT-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ro-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ru-6.3.3.2-lp151.3.9.1 libreoffice-l10n-rw-6.3.3.2-lp151.3.9.1 libreoffice-l10n-sa_IN-6.3.3.2-lp151.3.9.1 libreoffice-l10n-sat-6.3.3.2-lp151.3.9.1 libreoffice-l10n-sd-6.3.3.2-lp151.3.9.1 libreoffice-l10n-si-6.3.3.2-lp151.3.9.1 libreoffice-l10n-sid-6.3.3.2-lp151.3.9.1 libreoffice-l10n-sk-6.3.3.2-lp151.3.9.1 libreoffice-l10n-sl-6.3.3.2-lp151.3.9.1 libreoffice-l10n-sq-6.3.3.2-lp151.3.9.1 libreoffice-l10n-sr-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ss-6.3.3.2-lp151.3.9.1 libreoffice-l10n-st-6.3.3.2-lp151.3.9.1 libreoffice-l10n-sv-6.3.3.2-lp151.3.9.1 libreoffice-l10n-sw_TZ-6.3.3.2-lp151.3.9.1 libreoffice-l10n-szl-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ta-6.3.3.2-lp151.3.9.1 libreoffice-l10n-te-6.3.3.2-lp151.3.9.1 libreoffice-l10n-tg-6.3.3.2-lp151.3.9.1 libreoffice-l10n-th-6.3.3.2-lp151.3.9.1 libreoffice-l10n-tn-6.3.3.2-lp151.3.9.1 libreoffice-l10n-tr-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ts-6.3.3.2-lp151.3.9.1 libreoffice-l10n-tt-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ug-6.3.3.2-lp151.3.9.1 libreoffice-l10n-uk-6.3.3.2-lp151.3.9.1 libreoffice-l10n-uz-6.3.3.2-lp151.3.9.1 libreoffice-l10n-ve-6.3.3.2-lp151.3.9.1 libreoffice-l10n-vec-6.3.3.2-lp151.3.9.1 libreoffice-l10n-vi-6.3.3.2-lp151.3.9.1 libreoffice-l10n-xh-6.3.3.2-lp151.3.9.1 libreoffice-l10n-zh_CN-6.3.3.2-lp151.3.9.1 libreoffice-l10n-zh_TW-6.3.3.2-lp151.3.9.1 libreoffice-l10n-zu-6.3.3.2-lp151.3.9.1 mdds-1_5-devel-1.5.0-lp151.2.1 myspell-af_NA-20191016-lp151.2.6.1 myspell-af_ZA-20191016-lp151.2.6.1 myspell-an-20191016-lp151.2.6.1 myspell-an_ES-20191016-lp151.2.6.1 myspell-ar-20191016-lp151.2.6.1 myspell-ar_AE-20191016-lp151.2.6.1 myspell-ar_BH-20191016-lp151.2.6.1 myspell-ar_DZ-20191016-lp151.2.6.1 myspell-ar_EG-20191016-lp151.2.6.1 myspell-ar_IQ-20191016-lp151.2.6.1 myspell-ar_JO-20191016-lp151.2.6.1 myspell-ar_KW-20191016-lp151.2.6.1 myspell-ar_LB-20191016-lp151.2.6.1 myspell-ar_LY-20191016-lp151.2.6.1 myspell-ar_MA-20191016-lp151.2.6.1 myspell-ar_OM-20191016-lp151.2.6.1 myspell-ar_QA-20191016-lp151.2.6.1 myspell-ar_SA-20191016-lp151.2.6.1 myspell-ar_SD-20191016-lp151.2.6.1 myspell-ar_SY-20191016-lp151.2.6.1 myspell-ar_TN-20191016-lp151.2.6.1 myspell-ar_YE-20191016-lp151.2.6.1 myspell-be_BY-20191016-lp151.2.6.1 myspell-bg_BG-20191016-lp151.2.6.1 myspell-bn_BD-20191016-lp151.2.6.1 myspell-bn_IN-20191016-lp151.2.6.1 myspell-bo-20191016-lp151.2.6.1 myspell-bo_CN-20191016-lp151.2.6.1 myspell-bo_IN-20191016-lp151.2.6.1 myspell-br_FR-20191016-lp151.2.6.1 myspell-bs-20191016-lp151.2.6.1 myspell-bs_BA-20191016-lp151.2.6.1 myspell-ca-20191016-lp151.2.6.1 myspell-ca_AD-20191016-lp151.2.6.1 myspell-ca_ES-20191016-lp151.2.6.1 myspell-ca_ES_valencia-20191016-lp151.2.6.1 myspell-ca_FR-20191016-lp151.2.6.1 myspell-ca_IT-20191016-lp151.2.6.1 myspell-cs_CZ-20191016-lp151.2.6.1 myspell-da_DK-20191016-lp151.2.6.1 myspell-de-20191016-lp151.2.6.1 myspell-de_AT-20191016-lp151.2.6.1 myspell-de_CH-20191016-lp151.2.6.1 myspell-de_DE-20191016-lp151.2.6.1 myspell-el_GR-20191016-lp151.2.6.1 myspell-en-20191016-lp151.2.6.1 myspell-en_AU-20191016-lp151.2.6.1 myspell-en_BS-20191016-lp151.2.6.1 myspell-en_BZ-20191016-lp151.2.6.1 myspell-en_CA-20191016-lp151.2.6.1 myspell-en_GB-20191016-lp151.2.6.1 myspell-en_GH-20191016-lp151.2.6.1 myspell-en_IE-20191016-lp151.2.6.1 myspell-en_IN-20191016-lp151.2.6.1 myspell-en_JM-20191016-lp151.2.6.1 myspell-en_MW-20191016-lp151.2.6.1 myspell-en_NA-20191016-lp151.2.6.1 myspell-en_NZ-20191016-lp151.2.6.1 myspell-en_PH-20191016-lp151.2.6.1 myspell-en_TT-20191016-lp151.2.6.1 myspell-en_US-20191016-lp151.2.6.1 myspell-en_ZA-20191016-lp151.2.6.1 myspell-en_ZW-20191016-lp151.2.6.1 myspell-es-20191016-lp151.2.6.1 myspell-es_AR-20191016-lp151.2.6.1 myspell-es_BO-20191016-lp151.2.6.1 myspell-es_CL-20191016-lp151.2.6.1 myspell-es_CO-20191016-lp151.2.6.1 myspell-es_CR-20191016-lp151.2.6.1 myspell-es_CU-20191016-lp151.2.6.1 myspell-es_DO-20191016-lp151.2.6.1 myspell-es_EC-20191016-lp151.2.6.1 myspell-es_ES-20191016-lp151.2.6.1 myspell-es_GT-20191016-lp151.2.6.1 myspell-es_HN-20191016-lp151.2.6.1 myspell-es_MX-20191016-lp151.2.6.1 myspell-es_NI-20191016-lp151.2.6.1 myspell-es_PA-20191016-lp151.2.6.1 myspell-es_PE-20191016-lp151.2.6.1 myspell-es_PR-20191016-lp151.2.6.1 myspell-es_PY-20191016-lp151.2.6.1 myspell-es_SV-20191016-lp151.2.6.1 myspell-es_UY-20191016-lp151.2.6.1 myspell-es_VE-20191016-lp151.2.6.1 myspell-et_EE-20191016-lp151.2.6.1 myspell-fr_BE-20191016-lp151.2.6.1 myspell-fr_CA-20191016-lp151.2.6.1 myspell-fr_CH-20191016-lp151.2.6.1 myspell-fr_FR-20191016-lp151.2.6.1 myspell-fr_LU-20191016-lp151.2.6.1 myspell-fr_MC-20191016-lp151.2.6.1 myspell-gd_GB-20191016-lp151.2.6.1 myspell-gl-20191016-lp151.2.6.1 myspell-gl_ES-20191016-lp151.2.6.1 myspell-gu_IN-20191016-lp151.2.6.1 myspell-gug-20191016-lp151.2.6.1 myspell-gug_PY-20191016-lp151.2.6.1 myspell-he_IL-20191016-lp151.2.6.1 myspell-hi_IN-20191016-lp151.2.6.1 myspell-hr_HR-20191016-lp151.2.6.1 myspell-hu_HU-20191016-lp151.2.6.1 myspell-id-20191016-lp151.2.6.1 myspell-id_ID-20191016-lp151.2.6.1 myspell-is-20191016-lp151.2.6.1 myspell-is_IS-20191016-lp151.2.6.1 myspell-it_IT-20191016-lp151.2.6.1 myspell-kmr_Latn-20191016-lp151.2.6.1 myspell-kmr_Latn_SY-20191016-lp151.2.6.1 myspell-kmr_Latn_TR-20191016-lp151.2.6.1 myspell-lo_LA-20191016-lp151.2.6.1 myspell-lt_LT-20191016-lp151.2.6.1 myspell-lv_LV-20191016-lp151.2.6.1 myspell-nb_NO-20191016-lp151.2.6.1 myspell-ne_NP-20191016-lp151.2.6.1 myspell-nl_BE-20191016-lp151.2.6.1 myspell-nl_NL-20191016-lp151.2.6.1 myspell-nn_NO-20191016-lp151.2.6.1 myspell-no-20191016-lp151.2.6.1 myspell-oc_FR-20191016-lp151.2.6.1 myspell-pl_PL-20191016-lp151.2.6.1 myspell-pt_AO-20191016-lp151.2.6.1 myspell-pt_BR-20191016-lp151.2.6.1 myspell-pt_PT-20191016-lp151.2.6.1 myspell-ro-20191016-lp151.2.6.1 myspell-ro_RO-20191016-lp151.2.6.1 myspell-ru_RU-20191016-lp151.2.6.1 myspell-si_LK-20191016-lp151.2.6.1 myspell-sk_SK-20191016-lp151.2.6.1 myspell-sl_SI-20191016-lp151.2.6.1 myspell-sq_AL-20191016-lp151.2.6.1 myspell-sr-20191016-lp151.2.6.1 myspell-sr_CS-20191016-lp151.2.6.1 myspell-sr_Latn_CS-20191016-lp151.2.6.1 myspell-sr_Latn_RS-20191016-lp151.2.6.1 myspell-sr_RS-20191016-lp151.2.6.1 myspell-sv_FI-20191016-lp151.2.6.1 myspell-sv_SE-20191016-lp151.2.6.1 myspell-sw_TZ-20191016-lp151.2.6.1 myspell-te-20191016-lp151.2.6.1 myspell-te_IN-20191016-lp151.2.6.1 myspell-th_TH-20191016-lp151.2.6.1 myspell-tr-20191016-lp151.2.6.1 myspell-tr_TR-20191016-lp151.2.6.1 myspell-uk_UA-20191016-lp151.2.6.1 myspell-vi-20191016-lp151.2.6.1 myspell-vi_VN-20191016-lp151.2.6.1 myspell-zu_ZA-20191016-lp151.2.6.1 - openSUSE Leap 15.1 (x86_64): cmis-client-0.5.2-lp151.3.3.1 cmis-client-debuginfo-0.5.2-lp151.3.3.1 cmis-client-debugsource-0.5.2-lp151.3.3.1 libcmis-0_5-5-0.5.2-lp151.3.3.1 libcmis-0_5-5-debuginfo-0.5.2-lp151.3.3.1 libcmis-c-0_5-5-0.5.2-lp151.3.3.1 libcmis-c-0_5-5-debuginfo-0.5.2-lp151.3.3.1 libcmis-c-devel-0.5.2-lp151.3.3.1 libcmis-devel-0.5.2-lp151.3.3.1 libixion-0_15-0-0.15.0-lp151.4.6.1 libixion-0_15-0-debuginfo-0.15.0-lp151.4.6.1 libixion-debuginfo-0.15.0-lp151.4.6.1 libixion-debugsource-0.15.0-lp151.4.6.1 libixion-devel-0.15.0-lp151.4.6.1 libixion-tools-0.15.0-lp151.4.6.1 libixion-tools-debuginfo-0.15.0-lp151.4.6.1 libmwaw-0_3-3-0.3.15-lp151.2.3.1 libmwaw-0_3-3-debuginfo-0.3.15-lp151.2.3.1 libmwaw-debuginfo-0.3.15-lp151.2.3.1 libmwaw-debugsource-0.3.15-lp151.2.3.1 libmwaw-devel-0.3.15-lp151.2.3.1 libmwaw-tools-0.3.15-lp151.2.3.1 libmwaw-tools-debuginfo-0.3.15-lp151.2.3.1 liborcus-0_15-0-0.15.3-lp151.3.6.1 liborcus-0_15-0-debuginfo-0.15.3-lp151.3.6.1 liborcus-debuginfo-0.15.3-lp151.3.6.1 liborcus-debugsource-0.15.3-lp151.3.6.1 liborcus-devel-0.15.3-lp151.3.6.1 liborcus-tools-0.15.3-lp151.3.6.1 liborcus-tools-debuginfo-0.15.3-lp151.3.6.1 libreoffice-6.3.3.2-lp151.3.9.1 libreoffice-base-6.3.3.2-lp151.3.9.1 libreoffice-base-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-base-drivers-firebird-6.3.3.2-lp151.3.9.1 libreoffice-base-drivers-firebird-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-base-drivers-postgresql-6.3.3.2-lp151.3.9.1 libreoffice-base-drivers-postgresql-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-calc-6.3.3.2-lp151.3.9.1 libreoffice-calc-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-calc-extensions-6.3.3.2-lp151.3.9.1 libreoffice-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-debugsource-6.3.3.2-lp151.3.9.1 libreoffice-draw-6.3.3.2-lp151.3.9.1 libreoffice-draw-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-filters-optional-6.3.3.2-lp151.3.9.1 libreoffice-gnome-6.3.3.2-lp151.3.9.1 libreoffice-gnome-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-gtk3-6.3.3.2-lp151.3.9.1 libreoffice-gtk3-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-impress-6.3.3.2-lp151.3.9.1 libreoffice-impress-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-librelogo-6.3.3.2-lp151.3.9.1 libreoffice-mailmerge-6.3.3.2-lp151.3.9.1 libreoffice-math-6.3.3.2-lp151.3.9.1 libreoffice-math-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-officebean-6.3.3.2-lp151.3.9.1 libreoffice-officebean-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-pyuno-6.3.3.2-lp151.3.9.1 libreoffice-pyuno-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-qt5-6.3.3.2-lp151.3.9.1 libreoffice-qt5-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-sdk-6.3.3.2-lp151.3.9.1 libreoffice-sdk-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-sdk-doc-6.3.3.2-lp151.3.9.1 libreoffice-writer-6.3.3.2-lp151.3.9.1 libreoffice-writer-debuginfo-6.3.3.2-lp151.3.9.1 libreoffice-writer-extensions-6.3.3.2-lp151.3.9.1 libreofficekit-6.3.3.2-lp151.3.9.1 libreofficekit-devel-6.3.3.2-lp151.3.9.1 python3-libixion-0.15.0-lp151.4.6.1 python3-libixion-debuginfo-0.15.0-lp151.4.6.1 python3-liborcus-0.15.3-lp151.3.6.1 python3-liborcus-debuginfo-0.15.3-lp151.3.6.1 spdlog-devel-0.16.3-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-9853.html https://bugzilla.suse.com/1061210 https://bugzilla.suse.com/1105173 https://bugzilla.suse.com/1144522 https://bugzilla.suse.com/1152684 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2712-1: important: Security update for chromium
by opensuse-security＠opensuse.org 31 Dec '19

31 Dec '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2712-1 Rating: important References: #1159498 Cross-References: CVE-2019-13767 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for chromium fixes the following issues: Chromium was updated to 79.0.3945.88: - CVE-2019-13767: Fixed a use after free in media picker (boo#1159498) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2712=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2712=1 Package List: - openSUSE Leap 15.1 (x86_64): chromedriver-79.0.3945.88-lp151.2.54.1 chromedriver-debuginfo-79.0.3945.88-lp151.2.54.1 chromium-79.0.3945.88-lp151.2.54.1 chromium-debuginfo-79.0.3945.88-lp151.2.54.1 chromium-debugsource-79.0.3945.88-lp151.2.54.1 - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-79.0.3945.88-bp151.3.38.1 chromedriver-debuginfo-79.0.3945.88-bp151.3.38.1 chromium-79.0.3945.88-bp151.3.38.1 chromium-debuginfo-79.0.3945.88-bp151.3.38.1 chromium-debugsource-79.0.3945.88-bp151.3.38.1 References: https://www.suse.com/security/cve/CVE-2019-13767.html https://bugzilla.suse.com/1159498 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2700-1: important: Security update for samba
by opensuse-security＠opensuse.org 22 Dec '19

22 Dec '19

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2700-1 Rating: important References: #1158108 #1158109 Cross-References: CVE-2019-14861 CVE-2019-14870 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for samba fixes the following issues: - CVE-2019-14861: Fixed a DNSServer RPC server crash, that allowed an authenticated user to crash the DCE/RPC DNS management server by creating records with matching the zone name (bsc#1158108). - CVE-2019-14870: Fixed a DelegationNotAllowed not being enforced (bsc#1158109). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2700=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ctdb-4.9.5+git.224.86a8e66adea-lp151.2.12.1 ctdb-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 ctdb-pcp-pmda-4.9.5+git.224.86a8e66adea-lp151.2.12.1 ctdb-pcp-pmda-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 ctdb-tests-4.9.5+git.224.86a8e66adea-lp151.2.12.1 ctdb-tests-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libdcerpc-binding0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libdcerpc-binding0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libdcerpc-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libdcerpc-samr-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libdcerpc-samr0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libdcerpc-samr0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libdcerpc0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libdcerpc0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-krb5pac-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-krb5pac0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-krb5pac0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-nbt-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-nbt0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-nbt0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-standard-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-standard0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-standard0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libnetapi-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libnetapi0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libnetapi0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-credentials-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-credentials0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-credentials0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-errors-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-errors0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-errors0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-hostconfig-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-hostconfig0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-hostconfig0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-passdb-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-passdb0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-passdb0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-policy-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-policy-python-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-policy-python3-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-policy0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-policy0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-policy0-python3-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-policy0-python3-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-util-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-util0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-util0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamdb-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamdb0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamdb0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbclient-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbclient0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbclient0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbconf-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbconf0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbconf0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbldap-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbldap2-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbldap2-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libtevent-util-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libtevent-util0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libtevent-util0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libwbclient-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libwbclient0-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libwbclient0-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-ad-dc-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-ad-dc-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-client-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-client-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-core-devel-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-debugsource-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-dsdb-modules-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-dsdb-modules-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-libs-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-libs-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-libs-python-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-libs-python-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-libs-python3-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-libs-python3-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-pidl-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-python-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-python-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-python3-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-python3-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-test-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-test-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-winbind-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-winbind-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 - openSUSE Leap 15.1 (noarch): samba-doc-4.9.5+git.224.86a8e66adea-lp151.2.12.1 - openSUSE Leap 15.1 (x86_64): libdcerpc-binding0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libdcerpc-binding0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libdcerpc-samr0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libdcerpc-samr0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libdcerpc0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libdcerpc0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-krb5pac0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-krb5pac0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-nbt0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-nbt0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-standard0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr-standard0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libndr0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libnetapi0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libnetapi0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-credentials0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-credentials0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-errors0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-errors0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-hostconfig0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-hostconfig0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-passdb0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-passdb0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-policy0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-policy0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-policy0-python3-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-policy0-python3-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-util0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamba-util0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamdb0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsamdb0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbclient0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbclient0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbconf0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbconf0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbldap2-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libsmbldap2-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libtevent-util0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libtevent-util0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libwbclient0-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 libwbclient0-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-ad-dc-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-ad-dc-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-ceph-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-ceph-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-client-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-client-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-libs-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-libs-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-libs-python-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-libs-python-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-libs-python3-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-libs-python3-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-winbind-32bit-4.9.5+git.224.86a8e66adea-lp151.2.12.1 samba-winbind-32bit-debuginfo-4.9.5+git.224.86a8e66adea-lp151.2.12.1 References: https://www.suse.com/security/cve/CVE-2019-14861.html https://www.suse.com/security/cve/CVE-2019-14870.html https://bugzilla.suse.com/1158108 https://bugzilla.suse.com/1158109 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2698-1: moderate: Security update for mariadb
by opensuse-security＠opensuse.org 22 Dec '19

22 Dec '19

openSUSE Security Update: Security update for mariadb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2698-1 Rating: moderate References: #1156669 Cross-References: CVE-2019-2737 CVE-2019-2739 CVE-2019-2740 CVE-2019-2758 CVE-2019-2805 CVE-2019-2938 CVE-2019-2974 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for mariadb to version 10.2.29 fixes the following issues: MariaDB was updated to 10.2.29 (bsc#1156669) Security issues fixed: - CVE-2019-2737: Fixed an issue where could lead a remote attacker to cause denial of service - CVE-2019-2938: Fixed an issue where could lead a remote attacker to cause denial of service - CVE-2019-2740: Fixed an issue where could lead a local attacker to cause denial of service - CVE-2019-2805: Fixed an issue where could lead a local attacker to cause denial of service - CVE-2019-2974: Fixed an issue where could lead a remote attacker to cause denial of service - CVE-2019-2758: Fixed an issue where could lead a local attacker to cause denial of service or data corruption - CVE-2019-2739: Fixed an issue where could lead a local attacker to cause denial of service or data corruption This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2698=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libmysqld-devel-10.2.29-lp151.2.9.1 libmysqld19-10.2.29-lp151.2.9.1 libmysqld19-debuginfo-10.2.29-lp151.2.9.1 mariadb-10.2.29-lp151.2.9.1 mariadb-bench-10.2.29-lp151.2.9.1 mariadb-bench-debuginfo-10.2.29-lp151.2.9.1 mariadb-client-10.2.29-lp151.2.9.1 mariadb-client-debuginfo-10.2.29-lp151.2.9.1 mariadb-debuginfo-10.2.29-lp151.2.9.1 mariadb-debugsource-10.2.29-lp151.2.9.1 mariadb-galera-10.2.29-lp151.2.9.1 mariadb-test-10.2.29-lp151.2.9.1 mariadb-test-debuginfo-10.2.29-lp151.2.9.1 mariadb-tools-10.2.29-lp151.2.9.1 mariadb-tools-debuginfo-10.2.29-lp151.2.9.1 - openSUSE Leap 15.1 (noarch): mariadb-errormessages-10.2.29-lp151.2.9.1 References: https://www.suse.com/security/cve/CVE-2019-2737.html https://www.suse.com/security/cve/CVE-2019-2739.html https://www.suse.com/security/cve/CVE-2019-2740.html https://www.suse.com/security/cve/CVE-2019-2758.html https://www.suse.com/security/cve/CVE-2019-2805.html https://www.suse.com/security/cve/CVE-2019-2938.html https://www.suse.com/security/cve/CVE-2019-2974.html https://bugzilla.suse.com/1156669 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2694-1: important: Security update for chromium
by opensuse-security＠opensuse.org 18 Dec '19

18 Dec '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2694-1 Rating: important References: #1158982 Cross-References: CVE-2019-13725 CVE-2019-13726 CVE-2019-13727 CVE-2019-13728 CVE-2019-13729 CVE-2019-13730 CVE-2019-13732 CVE-2019-13734 CVE-2019-13735 CVE-2019-13736 CVE-2019-13737 CVE-2019-13738 CVE-2019-13739 CVE-2019-13740 CVE-2019-13741 CVE-2019-13742 CVE-2019-13743 CVE-2019-13744 CVE-2019-13745 CVE-2019-13746 CVE-2019-13747 CVE-2019-13748 CVE-2019-13749 CVE-2019-13750 CVE-2019-13751 CVE-2019-13752 CVE-2019-13753 CVE-2019-13754 CVE-2019-13755 CVE-2019-13756 CVE-2019-13757 CVE-2019-13758 CVE-2019-13759 CVE-2019-13761 CVE-2019-13762 CVE-2019-13763 CVE-2019-13764 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes 37 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium was updated to 79.0.3945.79 (boo#1158982) - CVE-2019-13725: Fixed a use after free in Bluetooth - CVE-2019-13726: Fixed a heap buffer overflow in password manager - CVE-2019-13727: Fixed an insufficient policy enforcement in WebSockets - CVE-2019-13728: Fixed an out of bounds write in V8 - CVE-2019-13729: Fixed a use after free in WebSockets - CVE-2019-13730: Fixed a type Confusion in V8 - CVE-2019-13732: Fixed a use after free in WebAudio - CVE-2019-13734: Fixed an out of bounds write in SQLite - CVE-2019-13735: Fixed an out of bounds write in V8 - CVE-2019-13764: Fixed a type Confusion in V8 - CVE-2019-13736: Fixed an integer overflow in PDFium - CVE-2019-13737: Fixed an insufficient policy enforcement in autocomplete - CVE-2019-13738: Fixed an insufficient policy enforcement in navigation - CVE-2019-13739: Fixed an incorrect security UI in Omnibox - CVE-2019-13740: Fixed an incorrect security UI in sharing - CVE-2019-13741: Fixed an insufficient validation of untrusted input in Blink - CVE-2019-13742: Fixed an incorrect security UI in Omnibox - CVE-2019-13743: Fixed an incorrect security UI in external protocol handling - CVE-2019-13744: Fixed an insufficient policy enforcement in cookies - CVE-2019-13745: Fixed an insufficient policy enforcement in audio - CVE-2019-13746: Fixed an insufficient policy enforcement in Omnibox - CVE-2019-13747: Fixed an uninitialized Use in rendering - CVE-2019-13748: Fixed an insufficient policy enforcement in developer tools - CVE-2019-13749: Fixed an incorrect security UI in Omnibox - CVE-2019-13750: Fixed an insufficient data validation in SQLite - CVE-2019-13751: Fixed an uninitialized Use in SQLite - CVE-2019-13752: Fixed an out of bounds read in SQLite - CVE-2019-13753: Fixed an out of bounds read in SQLite - CVE-2019-13754: Fixed an insufficient policy enforcement in extensions - CVE-2019-13755: Fixed an insufficient policy enforcement in extensions - CVE-2019-13756: Fixed an incorrect security UI in printing - CVE-2019-13757: Fixed an incorrect security UI in Omnibox - CVE-2019-13758: Fixed an insufficient policy enforcement in navigation - CVE-2019-13759: Fixed an incorrect security UI in interstitials - CVE-2019-13761: Fixed an incorrect security UI in Omnibox - CVE-2019-13762: Fixed an insufficient policy enforcement in downloads - CVE-2019-13763: Fixed an insufficient policy enforcement in payments This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2694=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-79.0.3945.79-bp151.3.35.1 chromium-79.0.3945.79-bp151.3.35.1 References: https://www.suse.com/security/cve/CVE-2019-13725.html https://www.suse.com/security/cve/CVE-2019-13726.html https://www.suse.com/security/cve/CVE-2019-13727.html https://www.suse.com/security/cve/CVE-2019-13728.html https://www.suse.com/security/cve/CVE-2019-13729.html https://www.suse.com/security/cve/CVE-2019-13730.html https://www.suse.com/security/cve/CVE-2019-13732.html https://www.suse.com/security/cve/CVE-2019-13734.html https://www.suse.com/security/cve/CVE-2019-13735.html https://www.suse.com/security/cve/CVE-2019-13736.html https://www.suse.com/security/cve/CVE-2019-13737.html https://www.suse.com/security/cve/CVE-2019-13738.html https://www.suse.com/security/cve/CVE-2019-13739.html https://www.suse.com/security/cve/CVE-2019-13740.html https://www.suse.com/security/cve/CVE-2019-13741.html https://www.suse.com/security/cve/CVE-2019-13742.html https://www.suse.com/security/cve/CVE-2019-13743.html https://www.suse.com/security/cve/CVE-2019-13744.html https://www.suse.com/security/cve/CVE-2019-13745.html https://www.suse.com/security/cve/CVE-2019-13746.html https://www.suse.com/security/cve/CVE-2019-13747.html https://www.suse.com/security/cve/CVE-2019-13748.html https://www.suse.com/security/cve/CVE-2019-13749.html https://www.suse.com/security/cve/CVE-2019-13750.html https://www.suse.com/security/cve/CVE-2019-13751.html https://www.suse.com/security/cve/CVE-2019-13752.html https://www.suse.com/security/cve/CVE-2019-13753.html https://www.suse.com/security/cve/CVE-2019-13754.html https://www.suse.com/security/cve/CVE-2019-13755.html https://www.suse.com/security/cve/CVE-2019-13756.html https://www.suse.com/security/cve/CVE-2019-13757.html https://www.suse.com/security/cve/CVE-2019-13758.html https://www.suse.com/security/cve/CVE-2019-13759.html https://www.suse.com/security/cve/CVE-2019-13761.html https://www.suse.com/security/cve/CVE-2019-13762.html https://www.suse.com/security/cve/CVE-2019-13763.html https://www.suse.com/security/cve/CVE-2019-13764.html https://bugzilla.suse.com/1158982 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2693-1: important: Security update for chromium
by opensuse-security＠opensuse.org 18 Dec '19

18 Dec '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2693-1 Rating: important References: #1157269 Cross-References: CVE-2019-13723 CVE-2019-13724 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for chromium to version 78.0.3904.108 fixes the following issues: - Chromium was updated to 78.0.3904.108 (boo#1157269) Security issues fixed: - CVE-2019-13723: Fixed a use-after-free in Bluetooth - CVE-2019-13724: Fixed an out of bounds access in Bluetooth This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2693=1 Package List: - openSUSE Backports SLE-15 (aarch64 x86_64): chromedriver-78.0.3904.108-bp150.255.1 chromium-78.0.3904.108-bp150.255.1 References: https://www.suse.com/security/cve/CVE-2019-13723.html https://www.suse.com/security/cve/CVE-2019-13724.html https://bugzilla.suse.com/1157269 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2692-1: important: Security update for chromium
by opensuse-security＠opensuse.org 16 Dec '19

16 Dec '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2692-1 Rating: important References: #1158982 Cross-References: CVE-2019-13725 CVE-2019-13726 CVE-2019-13727 CVE-2019-13728 CVE-2019-13729 CVE-2019-13730 CVE-2019-13732 CVE-2019-13734 CVE-2019-13735 CVE-2019-13736 CVE-2019-13737 CVE-2019-13738 CVE-2019-13739 CVE-2019-13740 CVE-2019-13741 CVE-2019-13742 CVE-2019-13743 CVE-2019-13744 CVE-2019-13745 CVE-2019-13746 CVE-2019-13747 CVE-2019-13748 CVE-2019-13749 CVE-2019-13750 CVE-2019-13751 CVE-2019-13752 CVE-2019-13753 CVE-2019-13754 CVE-2019-13755 CVE-2019-13756 CVE-2019-13757 CVE-2019-13758 CVE-2019-13759 CVE-2019-13761 CVE-2019-13762 CVE-2019-13763 CVE-2019-13764 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 37 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium was updated to 79.0.3945.79 (boo#1158982) - CVE-2019-13725: Fixed a use after free in Bluetooth - CVE-2019-13726: Fixed a heap buffer overflow in password manager - CVE-2019-13727: Fixed an insufficient policy enforcement in WebSockets - CVE-2019-13728: Fixed an out of bounds write in V8 - CVE-2019-13729: Fixed a use after free in WebSockets - CVE-2019-13730: Fixed a type Confusion in V8 - CVE-2019-13732: Fixed a use after free in WebAudio - CVE-2019-13734: Fixed an out of bounds write in SQLite - CVE-2019-13735: Fixed an out of bounds write in V8 - CVE-2019-13764: Fixed a type Confusion in V8 - CVE-2019-13736: Fixed an integer overflow in PDFium - CVE-2019-13737: Fixed an insufficient policy enforcement in autocomplete - CVE-2019-13738: Fixed an insufficient policy enforcement in navigation - CVE-2019-13739: Fixed an incorrect security UI in Omnibox - CVE-2019-13740: Fixed an incorrect security UI in sharing - CVE-2019-13741: Fixed an insufficient validation of untrusted input in Blink - CVE-2019-13742: Fixed an incorrect security UI in Omnibox - CVE-2019-13743: Fixed an incorrect security UI in external protocol handling - CVE-2019-13744: Fixed an insufficient policy enforcement in cookies - CVE-2019-13745: Fixed an insufficient policy enforcement in audio - CVE-2019-13746: Fixed an insufficient policy enforcement in Omnibox - CVE-2019-13747: Fixed an uninitialized Use in rendering - CVE-2019-13748: Fixed an insufficient policy enforcement in developer tools - CVE-2019-13749: Fixed an incorrect security UI in Omnibox - CVE-2019-13750: Fixed an insufficient data validation in SQLite - CVE-2019-13751: Fixed an uninitialized Use in SQLite - CVE-2019-13752: Fixed an out of bounds read in SQLite - CVE-2019-13753: Fixed an out of bounds read in SQLite - CVE-2019-13754: Fixed an insufficient policy enforcement in extensions - CVE-2019-13755: Fixed an insufficient policy enforcement in extensions - CVE-2019-13756: Fixed an incorrect security UI in printing - CVE-2019-13757: Fixed an incorrect security UI in Omnibox - CVE-2019-13758: Fixed an insufficient policy enforcement in navigation - CVE-2019-13759: Fixed an incorrect security UI in interstitials - CVE-2019-13761: Fixed an incorrect security UI in Omnibox - CVE-2019-13762: Fixed an insufficient policy enforcement in downloads - CVE-2019-13763: Fixed an insufficient policy enforcement in payments Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2692=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2692=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-2692=1 Package List: - openSUSE Leap 15.1 (x86_64): chromedriver-79.0.3945.79-lp151.2.51.1 chromedriver-debuginfo-79.0.3945.79-lp151.2.51.1 chromium-79.0.3945.79-lp151.2.51.1 chromium-debuginfo-79.0.3945.79-lp151.2.51.1 chromium-debugsource-79.0.3945.79-lp151.2.51.1 - openSUSE Backports SLE-15 (aarch64 x86_64): chromedriver-79.0.3945.79-bp150.252.1 chromedriver-debuginfo-79.0.3945.79-bp150.252.1 chromium-79.0.3945.79-bp150.252.1 chromium-debuginfo-79.0.3945.79-bp150.252.1 chromium-debugsource-79.0.3945.79-bp150.252.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 x86_64): chromedriver-79.0.3945.79-19.1 chromedriver-debuginfo-79.0.3945.79-19.1 chromium-79.0.3945.79-19.1 chromium-debuginfo-79.0.3945.79-19.1 chromium-debugsource-79.0.3945.79-19.1 References: https://www.suse.com/security/cve/CVE-2019-13725.html https://www.suse.com/security/cve/CVE-2019-13726.html https://www.suse.com/security/cve/CVE-2019-13727.html https://www.suse.com/security/cve/CVE-2019-13728.html https://www.suse.com/security/cve/CVE-2019-13729.html https://www.suse.com/security/cve/CVE-2019-13730.html https://www.suse.com/security/cve/CVE-2019-13732.html https://www.suse.com/security/cve/CVE-2019-13734.html https://www.suse.com/security/cve/CVE-2019-13735.html https://www.suse.com/security/cve/CVE-2019-13736.html https://www.suse.com/security/cve/CVE-2019-13737.html https://www.suse.com/security/cve/CVE-2019-13738.html https://www.suse.com/security/cve/CVE-2019-13739.html https://www.suse.com/security/cve/CVE-2019-13740.html https://www.suse.com/security/cve/CVE-2019-13741.html https://www.suse.com/security/cve/CVE-2019-13742.html https://www.suse.com/security/cve/CVE-2019-13743.html https://www.suse.com/security/cve/CVE-2019-13744.html https://www.suse.com/security/cve/CVE-2019-13745.html https://www.suse.com/security/cve/CVE-2019-13746.html https://www.suse.com/security/cve/CVE-2019-13747.html https://www.suse.com/security/cve/CVE-2019-13748.html https://www.suse.com/security/cve/CVE-2019-13749.html https://www.suse.com/security/cve/CVE-2019-13750.html https://www.suse.com/security/cve/CVE-2019-13751.html https://www.suse.com/security/cve/CVE-2019-13752.html https://www.suse.com/security/cve/CVE-2019-13753.html https://www.suse.com/security/cve/CVE-2019-13754.html https://www.suse.com/security/cve/CVE-2019-13755.html https://www.suse.com/security/cve/CVE-2019-13756.html https://www.suse.com/security/cve/CVE-2019-13757.html https://www.suse.com/security/cve/CVE-2019-13758.html https://www.suse.com/security/cve/CVE-2019-13759.html https://www.suse.com/security/cve/CVE-2019-13761.html https://www.suse.com/security/cve/CVE-2019-13762.html https://www.suse.com/security/cve/CVE-2019-13763.html https://www.suse.com/security/cve/CVE-2019-13764.html https://bugzilla.suse.com/1158982 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2689-1: important: Security update for libssh
by opensuse-security＠opensuse.org 16 Dec '19

16 Dec '19

openSUSE Security Update: Security update for libssh ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2689-1 Rating: important References: #1158095 Cross-References: CVE-2019-14889 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libssh fixes the following issues: - CVE-2019-14889: Fixed an arbitrary command execution (bsc#1158095). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2689=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libssh-debugsource-0.8.7-lp151.2.6.1 libssh-devel-0.8.7-lp151.2.6.1 libssh4-0.8.7-lp151.2.6.1 libssh4-debuginfo-0.8.7-lp151.2.6.1 - openSUSE Leap 15.1 (x86_64): libssh4-32bit-0.8.7-lp151.2.6.1 libssh4-32bit-debuginfo-0.8.7-lp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-14889.html https://bugzilla.suse.com/1158095 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0