SUSE SLES12 Security Update : spamassassin (SUSE-SU-2021:1152-1)

This update for spamassassin fixes the following issues : spamassassin was updated to version 3.4.5 CVE-2019-12420: memory leak via crafted messages bsc1159133 CVE-2020-1946: security update bsc1184221 Note that Tenable Network Security has extracted the preceding description block directly from...

SUSE SLES12 Security Update : clamav (SUSE-SU-2021:1174-1)

This update for clamav fixes the following issues : CVE-2021-1252: Fix for Excel XLM parser infinite loop. bsc1184532 CVE-2021-1404: Fix for PDF parser buffer over-read; possible crash. bsc1184533 CVE-2021-1405: Fix for mail parser NULL-dereference crash. bsc1184534 Fix errors when scanning files...

SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2021:1180-1)

This update for xorg-x11-server fixes the following issues : CVE-2021-3472: XChangeFeedbackControl Integer Underflow Privilege Escalation bsc1180128 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2021:1181-1)

This update for xorg-x11-server fixes the following issues : CVE-2021-3472: XChangeFeedbackControl Integer Underflow Privilege Escalation bsc1180128 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLES12 Security Update : glibc (SUSE-SU-2021:1165-1)

This update for glibc fixes the following issues : CVE-2020-27618: Accept redundant shift sequences in IBM1364 bsc1178386 CVE-2020-29562: Fix incorrect UCS4 inner loop bounds bsc1179694 CVE-2020-29573: Harden printf against non-normal long double values bsc1179721 Check vector support in memmove...

SUSE SLES12 Security Update : cifs-utils (SUSE-SU-2021:1159-1)

This update for cifs-utils fixes the following issues : CVE-2021-20208: Fixed a potential kerberos auth leak escaping from container bsc1183239 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLES12 Security Update : wpa_supplicant (SUSE-SU-2021:1125-1)

This update for wpasupplicant fixes the following issues : CVE-2021-30004: Fixed an issue where forging attacks might have occured because AlgorithmIdentifier parameters were mishandled in tls/pkcs1.c and tls/x509v3.c bsc1184348 Note that Tenable Network Security has extracted the preceding...

SUSE SLES12 Security Update : fwupdate (SUSE-SU-2021:1123-1)

This update for fwupdate fixes the following issues : Add SBAT section to EFI images bsc1182057 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible...

SUSE SLES12 Security Update : fwupdate (SUSE-SU-2021:1111-1)

This update for fwupdate fixes the following issues : Add SBAT section to EFI images bsc1182057 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible...

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:1075-1)

This update for the Linux Kernel 4.12.14-122222 fixes several issues. The following security issues were fixed : CVE-2021-27365: Fixed an issue where data structures did not have appropriate length constraints or checks, and could exceed the PAGESIZE value bsc1183491. CVE-2021-27363: Fixed a kern...

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:1074-1)

This update for the Linux Kernel 4.4.180-94141 fixes several issues. The following security issues were fixed : CVE-2021-27365: Fixed an issue where data structures did not have appropriate length constraints or checks, and could exceed the PAGESIZE value bsc1183491. CVE-2021-27363: Fixed a kerne...

SUSE SLES12 Security Update : xen (SUSE-SU-2021:1023-1)

This update for xen fixes the following issues : CVE-2021-3308: VUL-0: xen: IRQ vector leak on x86 bsc1181254, XSA-360 CVE-2021-28687: VUL-0: xen: HVM soft-reset crashes toolstack bsc1183072, XSA-368 CVE-2021-20257: VUL-0: xen: infinite loop issue in the e1000 NIC emulator bsc1182846...

SUSE SLES12 Security Update : gssproxy (SUSE-SU-2021:1030-1)

This update for gssproxy fixes the following issues : CVE-2020-12658: Fixed an issue where gssproxy was not unlocking condmutex before pthread exit in gpworkermain bsc1180515. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2021:0999-1)

This update for MozillaFirefox fixes the following issues : Firefox was updated to 78.9.0 ESR MFSA 2021-11, bsc1183942 - CVE-2021-23981: Texture upload into an unbound backing buffer resulted in an out-of-bound read - CVE-2021-23982: Internal network hosts could have been probed by a malicious...

SUSE SLES12 Security Update : opensc (SUSE-SU-2021:0998-1)

This update for opensc fixes the following issues : CVE-2020-26571: gemsafe GPK smart card software driver stack-based buffer overflow bsc1177380 CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string in asn1decodeentry bsc1149747 CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring ...

SUSE SLES12 Security Update : zabbix (SUSE-SU-2021:0990-1)

This update for zabbix fixes the following issues : CVE-2021-27927: Fixed an improper CSRF protection mechanism bsc1183014. CVE-2013-7484: Fixed an issue where passwords in the users table were unsalted bsc1158321. Note that Tenable Network Security has extracted the preceding description block...

SUSE SLES12 Security Update : ovmf (SUSE-SU-2021:0987-1)

This update for ovmf fixes the following issues : CVE-2021-28211: ovmf: edk2: possible heap corruption with LzmaUefiDecompressGetInfo bsc1183578 CVE-2021-28210: ovmf: unlimited FV recursion, round 2 bsc1183579 Note that Tenable Network Security has extracted the preceding description block direct...

SUSE SLES12 Security Update : tar (SUSE-SU-2021:0975-1)

This update for tar fixes the following issues : - CVE-2021-20193: Memory leak in readheader in list.c bsc1181131 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it a...

SUSE SLES12 Security Update : openssl (SUSE-SU-2021:0939-1)

This update for openssl fixes the following issues : CVE-2021-23840: Fixed an Integer overflow in CipherUpdate bsc1182333 CVE-2021-23841: Fixed a NULL pointer dereference in X509issuerandserialhash bsc1182331 Note that Tenable Network Security has extracted the preceding description block directl...

SUSE SLES12 Security Update : openssl-1_1 (SUSE-SU-2021:0954-1)

This update for openssl-11 fixes the following security issue : CVE-2021-3449: An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signaturealgorithms extension but includes a...