SUSE-SU-2021:2424-1 Security update for dbus-1

This update for dbus-1 fixes the following issues: - CVE-2020-35512: users with the same numeric UID could lead to use-after-free and undefined behaviour bsc1187105 - CVE-2020-12049: truncated messages lead to resource exhaustion bsc1172505...

CVE-2021-36934

creationtimestamp| type| source ---|---|--- 2021-07-21 08:58:01+00:00| seen| https://t.me/thehackernews/1386 2021-07-21 12:05:02+00:00| seen| https://t.me/devukraine/178 2021-07-21 14:22:34+00:00| seen| https://t.me/CyberGovIL/1301 2021-07-21 15:18:22+00:00| published-proof-of-concept|...

SUSE-SU-2021:2409-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/xtables.c bnc1188116 . - CVE-2021-33909: Fixed...

OPENSUSE-SU-2021:2354-1 Security update for nodejs14

This update for nodejs14 fixes the following issues: Update nodejs14 to 14.17.2. Including fixes for: - CVE-2021-22918: libuv upgrade - Out of bounds read bsc1187973 - CVE-2021-27290: ssri Regular Expression Denial of Service bsc1187976 - CVE-2021-23362: hosted-git-info Regular Expression Denial ...

OPENSUSE-SU-2021:2327-1 Security update for nodejs12

This update for nodejs12 fixes the following issues: - update to 12.22.2: - CVE-2021-22918: Out of bounds read bsc1187973 - CVE-2021-23362: ssri Regular Expression Denial of Service and hosted-git-info bsc1187977 - CVE-2021-27290: Regular Expression Denial of Service bsc1187976 - CVE-2021-3450:...

SUSE-SU-2021:2327-1 Security update for nodejs12

This update for nodejs12 fixes the following issues: - update to 12.22.2: - CVE-2021-22918: Out of bounds read bsc1187973 - CVE-2021-23362: ssri Regular Expression Denial of Service and hosted-git-info bsc1187977 - CVE-2021-27290: Regular Expression Denial of Service bsc1187976 - CVE-2021-3450:...

SUSE-SU-2021:2325-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3573: Fixed an UAF vulnerability in function that can allow attackers to corrupt kernel heaps and adopt further exploitations. bsc1186666 - CVE-2021-060...

OPENSUSE-SU-2021:2322-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: - CVE-2020-13904: Fixed use-after-free via a crafted EXTINF duration in an m3u8 file bsc1172640. - CVE-2020-21041: Fixed buffer overflow vulnerability via apngdoinverseblend in libavcodec/pngenc.c bsc1186406. - CVE-2019-17539: Fixed NULL pointer...

SUSE-SU-2021:2303-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3573: Fixed an UAF vulnerability in function that can allow attackers to corrupt kernel heaps and adopt further exploitations. bsc1186666 -...

OPENSUSE-SU-2021:2291-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2021-0129,CVE-2020-26558: Check bluetooth security flags bsc1186463...

OPENSUSE-SU-2021:1641-1 Security update for djvulibre

This update for djvulibre fixes the following issues: - CVE-2021-32490 bsc1185895: Out of bounds write in function DJVU:filterbv via crafted djvu file - CVE-2021-32491 bsc1185900: Integer overflow in function render in tools/ddjvu via crafted djvu file - CVE-2021-32492 bsc1185904: Out of bounds...

OPENSUSE-SU-2021:1016-1 Security update for libqt5-qtwebengine

This update for libqt5-qtwebengine fixes the following issues: Update to version 5.15.3 CVE fixes backported in chromium updates: - CVE-2020-16044: Use after free in WebRTC - CVE-2021-21118: Heap buffer overflow in Blink - CVE-2021-21119: Use after free in Media - CVE-2021-21120: Use after free i...

SUSE-SU-2021:2208-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform out-of-bounds reads and writes in...

OPENSUSE-SU-2021:0926-1 Security update for tor

This update for tor fixes the following issues: tor 0.4.5.9 Don't allow relays to spoof RELAYEND or RELAYRESOLVED cell CVE-2021-34548, boo1187322 Detect more failure conditions from the OpenSSL RNG code boo1187323 Resist a hashtable-based CPU denial-of-service attack against relays CVE-2021-34549...

OPENSUSE-SU-2021:0915-1 Security update for live555

This update for live555 fixes the following issues: Update to 2021.05.22: - Lots of fixes and updates, including the security fix for CVE-2021-28899 boo1185874 and CVE-2019-15232 boo1146283. See the list in http://live555.com/liveMedia/public/changelog.txt...

OPENSUSE-SU-2021:0908-1 Security update for apache2

This update for apache2 fixes the following issues: - fixed CVE-2021-30641 bsc1187174: MergeSlashes regression - fixed CVE-2021-31618 bsc1186924: NULL pointer dereference on specially crafted HTTP/2 request - fixed CVE-2020-13950 bsc1187040: modproxy NULL pointer dereference - fixed CVE-2020-3545...

SUSE-SU-2021:2057-1 Security update for the Linux Kernel (Live Patch 24 for SLE 15)

This update for the Linux Kernel 4.12.14-15072 fixes several issues. The following security issues were fixed: - CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform out-of-bounds reads and writes in kernel memory bsc1186484. ...

SUSE-SU-2021:2004-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2021-30641: Fixed MergeSlashes regression bsc1187174 - CVE-2021-31618: Fixed NULL pointer dereference on specially crafted HTTP/2 request bsc1186924 - CVE-2020-35452: Fixed Single zero byte stack overflow in modauthdigest bsc1186922 -...

SUSE-SU-2021:1938-1 Security update for python-Pillow

This update for python-Pillow fixes the following issues: - CVE-2020-35655: Fixed a buffer over-read when decoding crafted SGI RLE image files bsc1180832. - CVE-2021-25293: Fixed an out-of-bounds read in SGIRleDecode.c bsc1183102. - CVE-2021-25290: Fixed a negative-offset memcpy with an invalid...

SUSE: Security Advisory (SUSE-SU-2014:0899-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...