SUSE SLES12 Security Update : openldap2 (SUSE-SU-2021:0693-1)

This update for openldap2 fixes the following issues : bsc1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c bernextelement, resulting in denial of service. bsc1182411 CVE-2020-36229 - ldapX509dn2bv crash in the X.509 DN parsing in adkeystring, resulting in...

SUSE SLES12 Security Update : grub2 (SUSE-SU-2021:0679-1)

This update for grub2 fixes the following issues : grub2 now implements the new 'SBAT' method for SHIM based secure boot revocation. bsc1182057 Following security issues are fixed that can violate secure boot constraints : CVE-2020-25632: Fixed a use-after-free in rmmod command bsc1176711...

SUSE SLES12 Security Update : grub2 (SUSE-SU-2021:0682-1)

This update for grub2 fixes the following issues : grub2 now implements the new 'SBAT' method for SHIM based secure boot revocation. bsc1182057 Following security issues are fixed that can violate secure boot constraints : CVE-2020-25632: Fixed a use-after-free in rmmod command bsc1176711...

SUSE SLES12 Security Update : grub2 (SUSE-SU-2021:0681-1)

This update for grub2 fixes the following issues : grub2 now implements the new 'SBAT' method for SHIM based secure boot revocation. bsc1182057 Following security issues are fixed that can violate secure boot constraints : CVE-2020-25632: Fixed a use-after-free in rmmod command bsc1176711...

SUSE SLES12 Security Update : nodejs10 (SUSE-SU-2021:0673-1)

This update for nodejs10 fixes the following issues : New upstream LTS version 10.24.0 : CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion bsc1182619 CVE-2021-22884: DNS rebinding in --inspect bsc1182620 CVE-2021-23840: OpenSSL - Integer overflow in CipherUpda...

SUSE SLES12 Security Update : python-cryptography (SUSE-SU-2021:0675-1)

This update for python-cryptography fixes the following issues : CVE-2020-36242: Using the Fernet class to symmetrically encrypt multi gigabyte values could result in an integer overflow and buffer overflow bsc1182066. Note that Tenable Network Security has extracted the preceding description blo...

SUSE SLES12 Security Update : open-iscsi (SUSE-SU-2021:0663-1)

This update for open-iscsi fixes the following issues : Fixes for CVE-2019-17437, CVE-2020-17438, CVE-2020-13987 and CVE-2020-13988 bsc1179908 : check for TCP urgent pointer past end of frame check for u8 overflow when processing TCP options check for header length underflow during checksum...

SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2021:0652-1)

This update for java-180-ibm fixes the following issues : Update to Java 8.0 Service Refresh 6 Fix Pack 25 bsc1182186, bsc1181239, CVE-2020-27221, CVE-2020-14803 - CVE-2020-27221: Potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8...

SUSE SLES12 Security Update : ImageMagick (SUSE-SU-2021:0600-1)

This update for ImageMagick fixes the following issues : CVE-2021-20243 bsc1182336: Division by zero in GetResizeFilterWeight in MagickCore/resize.c CVE-2021-20244 bsc1182325: Division by zero in ImplodeImage in MagickCore/visual-effects.c CVE-2021-20246 bsc1182337: Division by zero in...

SUSE SLES12 Security Update : glibc (SUSE-SU-2021:0608-1)

This update for glibc fixes the following issues : Fix buffer overrun in EUC-KR conversion module CVE-2019-25013, bsc1182117, BZ 24973 gconv: Fix assertion failure in ISO-2022-JP-3 module CVE-2021-3326, bsc1181505, BZ 27256 Fix parsing of /sys/devices/system/cpu/online bsc1180038, BZ 25859 powerp...

SUSE SLES12 Security Update : nodejs14 (SUSE-SU-2021:0650-1)

This update for nodejs14 fixes the following issues : New upstream LTS version 14.16.0 : CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion bsc1182619 CVE-2021-22884: DNS rebinding in --inspect bsc1182620 Note that Tenable Network Security has extracted the...

SUSE SLES12 Security Update : nodejs12 (SUSE-SU-2021:0649-1)

This update for nodejs12 fixes the following issues : New upstream LTS version 12.21.0 : CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion bsc1182619 CVE-2021-22884: DNS rebinding in --inspect bsc1182620 CVE-2021-23840: OpenSSL - Integer overflow in CipherUpda...

SUSE SLES12 Security Update : avahi (SUSE-SU-2021:0563-1)

This update for avahi fixes the following issues : CVE-2021-26720: drop privileges when invoking avahi-daemon-check-dns.sh bsc1180827 Add sudo to requires: used to drop privileges. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLES12 Security Update : postgresql13 (SUSE-SU-2021:0545-1)

This update for postgresql13 fixes the following issues : Upgrade to version 13.2 : Updating stored views and reindexing might be needed after applying this update. CVE-2021-3393, bsc1182040: Fix information leakage in constraint-violation error messages. CVE-2021-20229, bsc1182039: Fix failure t...

SUSE SLES12 Security Update : krb5-appl (SUSE-SU-2021:0527-1)

This update for krb5-appl fixes the following issues : CVE-2019-25017: Check the filenames sent by the server match those requested by the client bsc1131109. CVE-2019-25018: Disallow empty incoming filename or ones that refer to the current directory bsc1131109. Note that Tenable Network Security...

SUSE SLES12 Security Update : java-1_8_0-openjdk (SUSE-SU-2021:0533-1)

This update for java-180-openjdk fixes the following issues : Update to version jdk8u282 icedtea 3.18.0 - January 2021 CPU bsc1181239 - Security fixes + JDK-8247619: Improve Direct Buffering of Characters CVE-2020-14803 - Import of OpenJDK 8 u282 build 01 + JDK-6962725: Regtest...

SUSE SLES12 Security Update : ImageMagick (SUSE-SU-2021:0528-1)

This update for ImageMagick fixes the following issues : CVE-2021-20176: Fixed an issue where processing a crafted file could lead to division by zero bsc1181836. CVE-2020-27767: outside the range of representable values of type 'float' at MagickCore/quantum.h bsc1179322. Note that Tenable Networ...

SUSE SLES12 Security Update : php74 (SUSE-SU-2021:0522-1)

This update for php74 fixes the following issues : CVE-2021-21702 bsc1182049: NULL pointer dereference in SoapClient Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format i...

SUSE SLES12 Security Update : bind (SUSE-SU-2021:0503-1)

This update for bind fixes the following issues : CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack bsc1182246, CVE-2020-8625 Note that Tenable Network Security has extracted the preceding description block directly from the SU...

SUSE SLES12 Security Update : java-1_7_1-ibm (SUSE-SU-2021:0512-1)

This update for java-171-ibm fixes the following issues : Update to Java 7.1 Service Refresh 4 Fix Pack 80 bsc1182186, bsc1181239, CVE-2020-27221, CVE-2020-14803 - CVE-2020-27221: Potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8...