SUSE SLES12 Security Update : gstreamer-plugins-bad (SUSE-SU-2021:1873-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2021:1873-1 advisory. - CVE-2021-3185: Fixed buffer overflow in gsth264sliceparsedecrefpicmarking bsc1181255. Tenable has extracted the preceding description bloc...

SUSE SLES12 Security Update : kernel (Live Patch 38 for SLE 12 SP3) (SUSE-SU-2021:1870-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1870-1 advisory. This update for the Linux Kernel 4.4.180-94141 fixes several issues. The following security issues were fixed: - CVE-2020-36322:...

SUSE SLES12 Security Update : kernel (Live Patch 36 for SLE 12 SP3) (SUSE-SU-2021:1865-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1865-1 advisory. This update for the Linux Kernel 4.4.180-94135 fixes several issues. The following security issues were fixed: - Fix a kernel warni...

SUSE SLES12 Security Update : polkit (SUSE-SU-2021:1842-1)

This update for polkit fixes the following issues : CVE-2021-3560: Fixed a local privilege escalation using polkitsystembusnamegetcredssync bsc1186497. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted ...

SUSE SLES12 Security Update : avahi (SUSE-SU-2021:1494-2)

This update for avahi fixes the following issues : CVE-2021-3468: avoid infinite loop by handling HUP event in clientwork bsc1184521. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLES12 Security Update : libwebp (SUSE-SU-2021:1830-1)

This update for libwebp fixes the following issues : CVE-2018-25010: Fixed heap-based buffer overflow in ApplyFilter bsc1185685. CVE-2020-36330: Fixed heap-based buffer overflow in ChunkVerifyAndAssign bsc1185691. CVE-2020-36332: Fixed extreme memory allocation when reading a file bsc1185674...

SUSE SLES12 Security Update : squid (SUSE-SU-2021:1838-1)

This update for squid fixes the following issues : update to 4.15 : CVE-2021-28652: Broken cache manager URL parsing bsc1185918 CVE-2021-28651: Memory leak in RFC 2169 response parsing bsc1185921 CVE-2021-28662: Limit HeaderLookupTablet::lookup to BadHdr and specific IDs bsc1185919 CVE-2021-31806...

SUSE SLES12 Security Update : qemu (SUSE-SU-2021:1837-1)

This update for qemu fixes the following issues : Fix out-of-bounds access issue while doing multi block SDMA CVE-2020-25085, bsc1176681 Fix out-of-bounds read information disclosure in icmp6sendechoreply CVE-2020-10756, bsc1172380 QEMU BIOS fails to read stage2 loader on s390x bsc1186290 Change...

SUSE SLES12 Security Update : qemu (SUSE-SU-2021:1829-1)

This update for qemu fixes the following issues : Fix OOB access during mmio operations CVE-2020-13754, bsc1172382 Fix sPAPR emulator leaks the host hardware identity CVE-2019-8934, bsc1126455 Fix out-of-bounds read information disclosure in icmp6sendechoreply CVE-2020-10756, bsc1172380 Fix...

SUSE SLES12 Security Update : dhcp (SUSE-SU-2021:1822-1)

This update for dhcp fixes the following issues : CVE-2021-25217: A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient bsc1186382 Note that Tenable Network Security has extracted the preceding description block directly from the SU...

SUSE SLES12 Security Update : postgresql13 (SUSE-SU-2021:1784-1)

This update for postgresql13 fixes the following issues : Upgrade to version 13.3 : CVE-2021-32027: Fixed integer overflows in array subscripting calculations bsc1185924. CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists bsc1185925. CVE-2021-32029...

SUSE SLES12 Security Update : slurm_20_11 (SUSE-SU-2021:1789-1)

This update for slurm2011 fixes the following issues : Udpate to 20.02.7 : CVE-2021-31215: remote code execution as SlurmUser because of a PrologSlurmctld or EpilogSlurmctld script leads to environment mishandling bsc1186024 Note that Tenable Network Security has extracted the preceding descripti...

SUSE SLES12 Security Update : slurm_18_08 (SUSE-SU-2021:1788-1)

This update for slurm1808 fixes the following issues : CVE-2021-31215: remote code execution as SlurmUser because of a PrologSlurmctld or EpilogSlurmctld script leads to environment mishandling bsc1186024 Note that Tenable Network Security has extracted the preceding description block directly fr...

SUSE SLES12 Security Update : curl (SUSE-SU-2021:1786-1)

This update for curl fixes the following issues: CVE-2021-22898: TELNET stack contents disclosure bsc1186114 CVE-2021-22876: The automatic referer leaks credentials bsc1183933 CVE-2020-8286: Inferior OCSP verification bsc1179593 CVE-2020-8285: FTP wildcard stack overflow bsc1179399 CVE-2020-8284:...

SUSE SLES12 Security Update : postgresql12 (SUSE-SU-2021:1783-1)

This update for postgresql12 fixes the following issues : Upgrade to version 12.7 : CVE-2021-32027: Fixed integer overflows in array subscripting calculations bsc1185924. CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists bsc1185925. CVE-2021-32029...

SUSE SLES12 Security Update : slurm_20_11 (SUSE-SU-2021:1791-1)

This update for slurm2011 fixes the following issues : Udpate to 20.11.7 : CVE-2021-31215: remote code execution as SlurmUser because of a PrologSlurmctld or EpilogSlurmctld script leads to environment mishandling bsc1186024 Ship REST API version and auth plugins with slurmrestd. Add YAML support...

SUSE SLES12 Security Update : postgresql10 (SUSE-SU-2021:1782-1)

This update for postgresql10 fixes the following issues : Upgrade to version 10.17 : CVE-2021-32027: Fixed integer overflows in array subscripting calculations bsc1185924. CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists bsc1185925. Don't use...

SUSE SLES12 Security Update : djvulibre (SUSE-SU-2021:1813-1)

This update for djvulibre fixes the following issues : CVE-2021-3500: Stack overflow in function DJVU:DjVuDocument:getdjvufile via crafted djvu file bsc1186253 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLES12 Security Update : slurm (SUSE-SU-2021:1787-1)

This update for slurm fixes the following issues : CVE-2021-31215: remote code execution as SlurmUser because of a PrologSlurmctld or EpilogSlurmctld script leads to environment mishandling bsc1186024 Note that Tenable Network Security has extracted the preceding description block directly from t...

SUSE SLES12 Security Update : libX11 (SUSE-SU-2021:1766-1)

This update for libX11 fixes the following issues : CVE-2021-31535: Fixed missing request length checks in libX11 bsc1182506. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...