SUSE SLES12 Security Update : wavpack (SUSE-SU-2021:0929-1)

This update for wavpack fixes the following issues : CVE-2020-35738: Fixed an out-of-bounds write in WavpackPackSamples bsc1180414. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically cle...

SUSE SLES12 Security Update : openssl (SUSE-SU-2021:0939-1)

This update for openssl fixes the following issues : CVE-2021-23840: Fixed an Integer overflow in CipherUpdate bsc1182333 CVE-2021-23841: Fixed a NULL pointer dereference in X509issuerandserialhash bsc1182331 Note that Tenable Network Security has extracted the preceding description block directl...

SUSE SLES12 Security Update : python36 (SUSE-SU-2021:0887-1)

This update for python36 fixes the following issues : python36 was updated to 3.6.13 - CVE-2021-23336: Fixed a potential web cache poisoning by using a semicolon in query parameters use of semicolon as a query string separator bsc1182379. Note that Tenable Network Security has extracted the...

SUSE SLES12 Security Update : python3 (SUSE-SU-2021:0886-1)

This update for python3 fixes the following issues : CVE-2021-23336: Fixed a potential web cache poisoning by using a semicolon in query parameters use of semicolon as a query string separator bsc1182379. Note that Tenable Network Security has extracted the preceding description block directly fr...

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0835-1)

This update for the Linux Kernel 4.4.121-92149 fixes several issues. The following security issues were fixed : CVE-2020-27786: Fixed a potential user after free which could have led to memory corruption or privilege escalation bsc1179616. CVE-2020-28374: Fixed insufficient identifier checking in...

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0870-1)

This update for the Linux Kernel 4.4.121-92138 fixes several issues. The following security issues were fixed : CVE-2021-3347: Fixed a use-after-free in the PI futexes during fault handling, allowing local users to execute code in the kernel bsc1181553. CVE-2020-27786: Fixed a potential user afte...

SUSE SLES12 Security Update : glib2 (SUSE-SU-2021:0801-1)

This update for glib2 fixes the following issues : CVE-2021-27218: gbytearraynewtake takes a gsize as length but stores in a guint, this patch will refuse if the length is larger than guint. bsc1182328 CVE-2021-27219: gmemdup takes a guint as parameter and sometimes leads into an integer overflow...

SUSE SLES12 Security Update : python (SUSE-SU-2021:0794-1)

This update for python fixes the following issues : python27 was upgraded to 2.7.18 CVE-2021-23336: Fixed a potential web cache poisoning by using a semicolon in query parameters use of semicolon as a query string separator bsc1182379. Note that Tenable Network Security has extracted the precedin...

SUSE SLES12 Security Update : compat-openssl098 (SUSE-SU-2021:0793-1)

This update for compat-openssl098 fixes the following issues : CVE-2021-23840: Fixed an Integer overflow in CipherUpdate bsc1182333 CVE-2021-23841: Fixed a NULL pointer dereference in X509issuerandserialhash bsc1182331 Note that Tenable Network Security has extracted the preceding description blo...

SUSE SLES12 Security Update : apache2 (SUSE-SU-2021:0779-1)

This update for apache2 fixes the following issues : Fixed potential content spoofing with default error pagesbsc118270 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and forma...

SUSE SLES12 Security Update : s390-tools (SUSE-SU-2021:0776-1)

This update for s390-tools fixes the following issues : Fixed an issue where IPL was not working when bootloader was installed on a SCSI disk with 4k physical blocksize without using a devicemapper target bsc1183041. CVE-2021-25316: Do not use predictable temporary file names bsc1182777. Made the...

SUSE SLES12 Security Update : wpa_supplicant (SUSE-SU-2021:0720-1)

This update for wpasupplicant fixes the following issues : CVE-2021-27803: Fixed a P2P provision discovery processing vulnerability bsc1182805. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLES12 Security Update : wpa_supplicant (SUSE-SU-2021:0745-1)

This update for wpasupplicant fixes the following issues : CVE-2021-27803: P2P provision discovery processing vulnerability bsc1182805 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0736-1)

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping XSA-365 bsc1181843. CVE-2021-26931: Fixed an issue where Linux kernel was treating gra...

SUSE SLES12 Security Update : git (SUSE-SU-2021:0756-1)

This update for git fixes the following issues : On case-insensitive filesystems, with support for symbolic links, if Git is configured globally to apply delay-capable clean/smudge filters such as Git LFS, Git could be fooled into running remote code during a clone. bsc1183026, CVE-2021-21300 Not...

SUSE SLES12 Security Update : openssl-1_1 (SUSE-SU-2021:0752-1)

This update for openssl-11 fixes the following issues : CVE-2021-23840: Fixed an Integer overflow in CipherUpdate bsc1182333 CVE-2021-23841: Fixed a NULL pointer dereference in X509issuerandserialhash bsc1182331 Note that Tenable Network Security has extracted the preceding description block...

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0743-1)

The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping XSA-365 bsc1181843. CVE-2021-26931: Fixed an issue where Linux kernel was treating gra...

SUSE SLES12 Security Update : openssl-1_0_0 (SUSE-SU-2021:0725-1)

This update for openssl-100 fixes the following issues : CVE-2021-23840: Fixed an Integer overflow in CipherUpdate bsc1182333 CVE-2021-23841: Fixed a NULL pointer dereference in X509issuerandserialhash bsc1182331 Note that Tenable Network Security has extracted the preceding description block...

SUSE SLES12 Security Update : freeradius-server (SUSE-SU-2021:0713-1)

This update for freeradius-server fixes the following issues : move logrotate options into specific parts for each log as 'global' options will persist past and clobber global options in the main logrotate config bsc1180525 Note that Tenable Network Security has extracted the preceding descriptio...

SUSE SLES12 Security Update : openldap2 (SUSE-SU-2021:0693-1)

This update for openldap2 fixes the following issues : bsc1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c bernextelement, resulting in denial of service. bsc1182411 CVE-2020-36229 - ldapX509dn2bv crash in the X.509 DN parsing in adkeystring, resulting in...