The following updates has been released for openSUSE:
openSUSE-SU-2018:1553-1: important: Security update for gitGit and dpdk-thunderxdpdk Updates for openSUSE
This update fixes two vulnerabilities is git: 1) path sanity-checks on NTFS can read arbitrary memory (CVE-2018-11233, boo#1095218). 2) arbitrary code execution when recursively cloning a malicious repository (CVE-2018-11235, boo#1095219)
Available for both openSUSE Leap 42.3 and 15.0
openSUSE-SU-2018:1560-1: moderate: Security update for dpdk-thunderxdpdk
This update fixes a security issue in the DPDK vhost-user interface. The interface did not check to verify that all the requested guest physical range was mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may have lead to a malicious guest exposing vhost-user backend process memory (CVE-2018-1059, bsc#1089638).
Available for openSUSE Leap 42.3