SUSE SLES12 Security Update : cups (SUSE-SU-2021:1453-1)

This update for cups fixes the following issues : CVE-2021-25317: ownership of /var/log/cups could allow privilege escalation from lp user to root via symlink attacks bsc1184161 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLES12 Security Update : samba (SUSE-SU-2021:1438-1)

This update for samba fixes the following issues : CVE-2021-20254: Fixed a buffer overrun in sidstounixids bsc1184677. Avoid free'ing our own pointer in memcache when memcachetrim attempts to reduce cache size bsc1179156. Adjust smbcacls '--propagate-inheritance' feature to align with upstream...

SUSE SLES12 Security Update : permissions (SUSE-SU-2021:1429-1)

This update for permissions fixes the following issues : Update to version 20170707 : - make btmp root:utmp bsc1050467, bsc1182899 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clea...

SUSE SLES12 Security Update : samba (SUSE-SU-2021:1442-1)

This update for samba fixes the following issues : CVE-2021-20254: Fixed a buffer overrun in sidstounixids bsc1184677. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format...

SUSE SLES12 Security Update : samba (SUSE-SU-2021:1439-1)

This update for samba fixes the following issues : CVE-2021-20254: Fixed a buffer overrun in sidstounixids bsc1184677. Adjust smbcacls '--propagate-inheritance' feature to align with upstream bsc1178469. Note that Tenable Network Security has extracted the preceding description block directly fro...

SUSE SLES12 Security Update : java-1_7_0-openjdk (SUSE-SU-2021:1435-1)

This update for java-170-openjdk fixes the following issues : Update to 2.6.25 - OpenJDK 7u291 January 2021 CPU, bsc1181239 - Security fixes + JDK-8247619: Improve Direct Buffering of Characters - Import of OpenJDK 7 u291 build 1 + JDK-8254177: tz Upgrade time-zone data to tzdata2020b +...

SUSE SLES12 Security Update : gdm (SUSE-SU-2021:1401-1)

This update for gdm fixes the following issues : Avoid the signal SIGTRAP when gdm exits bsc1184456. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as...

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:1373-1)

This update for the Linux Kernel 4.4.180-94135 fixes one issue. The following security issues were fixed : CVE-2021-28688: Fixed an issue introduced by XSA-365 bsc1182294, bsc1183646. CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping XSA-365 bsc1182294. CVE-2021-26931:...

SUSE SLES12 Security Update : curl (SUSE-SU-2021:1396-1)

This update for curl fixes the following issues : CVE-2021-22876: Fixed an issue where the automatic referer was leaking credentials bsc1183933. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLES12 Security Update : libnettle (SUSE-SU-2021:1399-1)

This update for libnettle fixes the following issues : CVE-2021-20305: Fixed the multiply function which was being called with out-of-range scalars bsc1184401, bsc1183835. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:1341-1)

This update for the Linux Kernel 4.4.180-94141 fixes one issue. The following security issue was fixed : CVE-2021-28688: Fixed an issue introduced by XSA-365 bsc1182294, bsc1183646. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLES12 Security Update : java-11-openjdk (SUSE-SU-2021:1314-1)

This update for java-11-openjdk fixes the following issues : Update to upstream tag jdk-11.0.11+9 April 2021 CPU - CVE-2021-2163: Fixed incomplete enforcement of JAR signing disabled algorithms bsc1185055 - CVE-2021-2161: Fixed incorrect handling of partially quoted arguments in ProcessBuilder...

SUSE SLES12 Security Update : qemu (SUSE-SU-2021:1305-1)

This update for qemu fixes the following issues : Fix OOB access in sm501 device emulation CVE-2020-12829, bsc1172385 Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation CVE-2020-13362 bsc1172383 Fix use-after-free in usb xhci packet handling CVE-2020-25723, bsc1178934 Fix use-after-free...

SUSE SLES12 Security Update : sudo (SUSE-SU-2021:1273-1)

This update for sudo fixes the following issues : L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 bsc1183936 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE SLES12 Security Update : sudo (SUSE-SU-2021:1267-1)

This update for sudo fixes the following issues : L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 bsc1183936 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE SLES12 Security Update : sudo (SUSE-SU-2021:1274-1)

This update for sudo fixes the following issues : L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 bsc1183936 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE SLES12 Security Update : ImageMagick (SUSE-SU-2021:1277-1)

This update for ImageMagick fixes the following issues : CVE-2021-20309: Division by zero in WaveImage of MagickCore/visual-effects. bsc1184624 CVE-2021-20311: Division by zero in sRGBTransformImage in MagickCore/colorspace.c bsc1184626 CVE-2021-20312: Integer overflow in WriteTHUMBNAILImage of...

SUSE SLES12 Security Update : xen (SUSE-SU-2021:1251-1)

This update for xen fixes the following issues : CVE-2021-27379: Fixed an issue where entries in the IOMMU were not being updated under certain circumstances due to improper backport of XSA-321 XSA-366, bsc1182431 CVE-2021-20257: Fixed an infinite loop in the e1000 NIC emulator bsc1182846 Note th...

SUSE SLES12 Security Update : xen (SUSE-SU-2021:1252-1)

This update for xen fixes the following issues : CVE-2021-20257: xen: infinite loop issue in the e1000 NIC emulator bsc1182846. CVE-2021-27379: Fixed an issue where entries in the IOMMU were not being updated under certain circumstances due to improper backport of XSA-321 XSA-366, bsc1182431. Not...

SUSE SLES12 Security Update : qemu (SUSE-SU-2021:1241-1)

This update for qemu fixes the following issues : Fix OOB access in sm501 device emulation CVE-2020-12829, bsc1172385 Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation CVE-2020-13362, bsc1172383 Fix use-after-free in usb xhci packet handling CVE-2020-25723, bsc1178934 Fix use-after-fre...