Security update for qemu (important)

openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2019:2059-1 Rating: important References: 1079730 1098403 1111025 1119115 1134883 1135902 1136540 1136778 1140402 1143794 Cross-References: CVE-2019-12155 CVE-2019-13164 CVE-2019-14378 Affected Products: openSUSE Leap...

OPENSUSE-SU-2019:2056-1 Security update for go1.12

This update for go1.12 fixes the following issues: Security issues fixed: - CVE-2019-9512: Fixed HTTP/2 flood using PING frames that results in unbounded memory growth bsc1146111. - CVE-2019-9514: Fixed HTTP/2 implementation that is vulnerable to a reset flood, potentially leading to a denial of...

Product update: Virtuozzo Infrastructure Platform 2.5 Update 10 (2.5.0-1691)

This update provides fixes and improvements. Vulnerability id: VSTOR-22386, VSTOR-24775, VSTOR-25752 Upgrade Improvements in iSCSI targets migration during upgrade. Vulnerability id: VSTOR-25072 Upgrade Improved upgrade speed. Vulnerability id: VSTOR-25784 Upgrade Unable to download upgrade as a...

SUSE-SU-2019:2213-1 Security update for go1.11

This update for go1.11 fixes the following issues: Security issues fixed: - CVE-2019-9512: Fixed HTTP/2 flood using PING frames that results in unbounded memory growth bsc1146111. - CVE-2019-9514: Fixed HTTP/2 implementation that is vulnerable to a reset flood, potentially leading to a denial of...

Security update for vlc (important)

openSUSE Security Update: Security update for vlc Announcement ID: openSUSE-SU-2019:1897-1 Rating: important References: 1118586 1138354 1138933 1141522 1142161 1143547 1143549 Cross-References: CVE-2018-19857 CVE-2019-12874 CVE-2019-13602 CVE-2019-13962 CVE-2019-5439 CVE-2019-5459 CVE-2019-5460...

Security update for dosbox (important)

openSUSE Security Update: Security update for dosbox Announcement ID: openSUSE-SU-2019:1905-1 Rating: important References: 1140254 Cross-References: CVE-2019-12594 CVE-2019-7165 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15 An update that fixes two...

openSUSE Security Update : vlc (openSUSE-2019-1840)

This update for vlc to version 3.0.7.1 fixes the following issues : Security issues fixed : - CVE-2019-5439: Fixed a buffer overflow bsc1138354. - CVE-2019-5459: Fixed an integer underflow bsc1143549. - CVE-2019-5460: Fixed a double free bsc1143547. - CVE-2019-12874: Fixed a double free in...

Product update: Virtuozzo Infrastructure Platform 3.0 Update 1.1 (3.0.1-59)

This update provides stability fixes. Vulnerability id: VSTOR-25491 ABGW Acronis Backup Gateway could reject Acronis Backup Advanced certificates. Vulnerability id: VSTOR-25625 S3 NS services could fail to start...

Product update: Virtuozzo Infrastructure Platform 3.0 Update 1 (3.0.1-55)

This update provides a new feature as well as stability and usability fixes. Vulnerability id: VSTOR-23861 Wrong details were reported for software RAID partitions. Vulnerability id: VSTOR-24687 Log rotation could lead to agent restart. Vulnerability id: VSTOR-24814 Network configuration was not...

SUSE-SU-2019:1961-1 Security update for spamassassin

This update for spamassassin to version 3.4.2 fixes the following issues: Security issues fixed: - CVE-2017-15705: Fixed denial of service via unclosed tags in crafted emails bsc1108745. - CVE-2018-11781: Fixed a code injection in the meta rule syntax by local users bsc1108748. - CVE-2018-11780:...

SUSE-SU-2019:1860-1 Security update for xrdp

This update for xrdp fixes the following issues: Security issues fixed: - CVE-2013-1430: When successfully logging in using RDP into an xrdp session, the file /.vnc/sesman$usernamepasswd was created. Its content was the equivalent of the user's cleartext password, DES encrypted with a known key...

SUSE-SU-2019:1850-1 Security update for webkit2gtk3

This update for webkit2gtk3 to version 2.24.2 fixes the following issues: Security issues fixed: - CVE-2019-6237, CVE-2019-8571, CVE-2019-8583, CVE-2019-8584, CVE-2019-8586, CVE-2019-8587, CVE-2019-8594, CVE-2019-8595, CVE-2019-8596, CVE-2019-8597, CVE-2019-8601, CVE-2019-8607, CVE-2019-8608,...

Security update for monitoring-plugins (moderate)

openSUSE Security Update: Security update for monitoring-plugins Announcement ID: openSUSE-SU-2019:1702-1 Rating: moderate References: 1132350 1132903 1133107 498669 519240 640367 677711 778970 789428 847229 859105 914486 Cross-References: CVE-2007-5623 Affected Products: openSUSE Backports SLE-1...

Unbreakable Enterprise kernel security update

4.1.12-124.28.6 - scsi: libfc: Fixup discmutex handling in fcoe module Hannes Reinecke Orabug: 29511036 - scsi: libfc: sanitize EDTOV and RATOV setting in fcp Hannes Reinecke Orabug: 29511036 - sysctl: Fix kabi breakage Shuning Zhang Orabug: 29689925 - proc: Fix procsysprunedcache to hold a sb...

OPENSUSE-SU-2019:1699-1 Security update for gvfs

This update for gvfs fixes the following issues: Security issues fixed: - CVE-2019-12795: Fixed a vulnerability which could have allowed attacks via local D-Bus method calls bsc1137930. - CVE-2019-12447: Fixed an improper handling of file ownership in daemon/gvfsbackendadmin.c due to no use of...

Kernel update: Virtuozzo ReadyKernel patch 82.2 for Virtuozzo 7.0.8 HF1 and 7.0.10 HF1

The fixes for CVE-2019-11477 and CVE-2019-11478 released in the ReadyKernel patch 82.0 turned out to cause network-related issues. These fixes are removed in this ReadyKernel patch for the kernels 3.10.0-862.11.6.vz7.64.7 Virtuozzo 7.0.8 HF1 and 3.10.0-957.12.2.vz7.86.2 Virtuozzo 7.0.10 HF1. Unti...

Security update for MozillaThunderbird (important)

openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2019:1606-1 Rating: important References: 1137595 1138872 Cross-References: CVE-2019-11703 CVE-2019-11704 CVE-2019-11705 CVE-2019-11706 CVE-2019-11707 CVE-2019-11708 Affected Products: openSUSE Leap 15.1...

SUSE-SU-2019:1553-1 Security update for openssl

This update for openssl fixes the following issues: - CVE-2018-0732: Reject excessively large primes in DH key generation bsc1097158 - CVE-2018-0734: Timing vulnerability in DSA signature generation bsc1113652 - CVE-2018-0737: Cache timing vulnerability in RSA Key Generation bsc1089039 -...

Unbreakable Enterprise kernel security update

4.14.35-1902.2.0 - mm: account managed pages to correct zone during deferred page init Daniel Jordan Orabug: 29914836 4.14.35-1902.1.5 - CVE numbers for build v4.14.35-1902.1.3 and fixup Jack Vogel Orabug: 29890784 Orabug: 29884301 Orabug: 29884301 CVE-2019-11477 CVE-2019-11478 CVE-2019-11479...

June 11, 2019—KB4503293 (OS Build 18362.175)

None None...