SUSE SLES12 Security Update : curl (SUSE-SU-2021:1763-1)

This update for curl fixes the following issues : CVE-2021-22898: Fixed curl TELNET stack contents disclosure bsc1186114. Allow partial chain verification jscSLE-17956 - Have intermediate certificates in the trust store be treated as trust-anchors, in the same way as self-signed root CA...

SUSE SLES12 Security Update : libX11 (SUSE-SU-2021:1766-1)

This update for libX11 fixes the following issues : CVE-2021-31535: Fixed missing request length checks in libX11 bsc1182506. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE SLES12 Security Update : graphviz (SUSE-SU-2021:1646-1)

This update for graphviz fixes the following issues : CVE-2020-18032: Fixed possible remote code execution via buffer overflow bsc1185833. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLES12 Security Update : xen (SUSE-SU-2021:1648-1)

This update for xen fixes the following issues : Security issue fixed : CVE-2021-28689: Fixed some x86 speculative vulnerabilities with bare non-shim 32-bit PV guests XSA-370 bsc1185104 Make sure xencommons is in a format as expected by fillup. bsc1185682 Each comment needs to be followed by an...

SUSE SLES12 Security Update : libxml2 (SUSE-SU-2021:1658-1)

This update for libxml2 fixes the following issues : Security issues fixed : - CVE-2021-3537: NULL pointer dereference in valid.c:xmlValidBuildAContentModel bsc1185698 CVE-2021-3518: Fixed a use after free in xinclude.c:xmlXIncludeDoProcess bsc1185408. CVE-2021-3517: Fixed a heap-based buffer...

SUSE SLES12 Security Update : djvulibre (SUSE-SU-2021:1645-1)

This update for djvulibre fixes the following issues : Security issues fixed : CVE-2021-32491 bsc1185900: Integer overflow in function render in tools/ddjvu via crafted djvu file CVE-2021-32492 bsc1185904: Out of bounds read in function DJVU:DataPool:hasdata via crafted djvu file CVE-2021-32493...

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:1623-1)

The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-36312: Fixed an issue in virt/kvm/kvmmain.c that had a kvmiobusunregisterdev memory leak upon a kmalloc failure bnc1184509. CVE-2021-29650: Fixed an...

SUSE SLES12 Security Update : python3 (SUSE-SU-2021:1621-1)

This update for python3 fixes the following issues : Security issues fixed : CVE-2020-27619: where Lib/test/multibytecodecsupport calls eval on content retrieved via HTTP. bsc1178009 Other fixes : Make sure to close the 'importfailed.map' file after the exception has been raised in order to avoid...

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:1617-1)

The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-36312: Fixed an issue in virt/kvm/kvmmain.c that had a kvmiobusunregisterdev memory leak upon a kmalloc failure bnc1184509. CVE-2021-29650: Fixed an...

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:1595-1)

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-36312: Fixed an issue within virt/kvm/kvmmain.c that had a kvmiobusunregisterdev memory leak upon a kmalloc failure bnc1184509. CVE-2021-29650: Fixed an...

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:1596-1)

The SUSE Linux Enterprise 12 SP4 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-36312: Fixed an issue in virt/kvm/kvmmain.c that had a kvmiobusunregisterdev memory leak upon a kmalloc failure bnc1184509. CVE-2021-29650: Fixed an...

SUSE SLES12 Security Update : xen (SUSE-SU-2021:1580-1)

This update for xen fixes the following issues : A recent systemd update caused a regression in 'xenstored.service' systemd now fails to track units that use systemd-notify. bsc1183790 Add a fix to delay between the call to 'systemd-notify' and the final exit of the wrapper script. bsc1185021,...

SUSE SLES12 Security Update : openvpn (SUSE-SU-2021:1576-1)

This update for openvpn fixes the following issues : CVE-2020-15078: Fixed authentication bypass with deferred authentication bsc1185279. CVE-2018-7544: Fixed cross-protocol scripting issue that was discovered in the management interface bsc1085803. Note that Tenable Network Security has extracte...

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:1572-1)

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-36312: Fixed an issue within virt/kvm/kvmmain.c that had a kvmiobusunregisterdev memory leak upon a kmalloc failure bnc1184509. CVE-2021-29650: Fix...

SUSE SLES12 Security Update : libxml2 (SUSE-SU-2021:1524-1)

This update for libxml2 fixes the following issues : CVE-2021-3518: Fixed a use after free in xinclude.c:xmlXIncludeDoProcess bsc1185408. CVE-2021-3517: Fixed a heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal bsc1185410. CVE-2021-3516: Fixed a use after free in...

SUSE SLES12 Security Update : python36 (SUSE-SU-2021:1490-1)

This update for python36 fixes the following issues : CVE-2021-3426: Fixed an information disclosure via pydoc bsc1183374. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE SLES12 Security Update : samba (SUSE-SU-2021:1492-1)

This update for samba fixes the following issues : CVE-2021-20254: Fixed a buffer overrun in sidstounixids bsc1184677. Avoid free'ing our own pointer in memcache when memcachetrim attempts to reduce cache size bsc1179156. Adjust smbcacls '--propagate-inheritance' feature to align with upstream...

SUSE SLES12 Security Update : avahi (SUSE-SU-2021:1494-1)

This update for avahi fixes the following issues : CVE-2021-3468: avoid infinite loop by handling HUP event in clientwork bsc1184521. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLES12 Security Update : bind (SUSE-SU-2021:1469-1)

This update for bind fixes the following issues : CVE-2021-25214: Fixed a broken inbound incremental zone update IXFR which could have caused named to terminate unexpectedly bsc1185345. CVE-2021-25215: Fixed an assertion check which could have failed while answering queries for DNAME records that...

SUSE SLES12 Security Update : bind (SUSE-SU-2021:1468-1)

This update for bind fixes the following issues : CVE-2021-25214: Fixed a broken inbound incremental zone update IXFR which could have caused named to terminate unexpectedly bsc1185345. CVE-2021-25215: Fixed an assertion check which could have failed while answering queries for DNAME records that...