SUSE SLES12 Security Update : bind (SUSE-SU-2021:0504-1)

This update for bind fixes the following issues : CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack bsc1182246, CVE-2020-8625 Note that Tenable Network Security has extracted the preceding description block directly from the SU...

SUSE SLES12 Security Update : php72 (SUSE-SU-2021:0498-1)

This update for php72 fixes the following issues : CVE-2021-21702 bsc1182049: NULL pointer dereference in SoapClient Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format i...

SUSE SLES12 Security Update : screen (SUSE-SU-2021:0491-1)

This update for screen fixes the following issues : CVE-2021-26937: Fixed double width combining char handling that could lead to a denial of service or code execution bsc1182092. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLES12 Security Update : jasper (SUSE-SU-2021:0489-1)

This update for jasper fixes the following issues : bsc1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls bsc1181483 CVE-2021-3272: Fix buffer over-read in jp2decode Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLES12 Security Update : openvswitch (SUSE-SU-2021:0446-1)

This update for openvswitch fixes the following issues : CVE-2020-35498: Fixed a denial of service related to the handling of Ethernet padding bsc1181742. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempt...

SUSE SLES12 Security Update : wpa_supplicant (SUSE-SU-2021:0477-1)

This update for wpasupplicant fixes the following issues : CVE-2021-0326: P2P group information processing vulnerability bsc1181777. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLES12 Security Update : openvswitch (SUSE-SU-2021:0479-1)

This update for openvswitch fixes the following issues : CVE-2020-35498: Fixed a denial of service related to the handling of Ethernet padding bsc1181742. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempt...

SUSE SLES12 Security Update : wpa_supplicant (SUSE-SU-2021:0478-1)

This update for wpasupplicant fixes the following issues : CVE-2021-0326: P2P group information processing vulnerability bsc1181777. CVE-2019-16275: AP mode PMF disconnection protection bypass bsc1150934 Note that Tenable Network Security has extracted the preceding description block directly fro...

SUSE SLES12 Security Update : openvswitch (SUSE-SU-2021:0451-1)

This update for openvswitch fixes the following issues : CVE-2020-35498: Fixed a denial of service related to the handling of Ethernet padding bsc1181742. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempt...

SUSE SLES12 Security Update : python (SUSE-SU-2021:0432-1)

This update for python fixes the following issues : buffer overflow in PyCArgrepr in ctypes/callproc.c, which may lead to remote code execution bsc1181126, CVE-2021-3177. Provide the newest setuptools wheel bsc1176262, CVE-2019-20916 in their correct form bsc1180686. Note that Tenable Network...

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0434-1)

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2021-3348: Fixed a use-after-free in nbdaddsocket that could be triggered by local attackers with access to the nbd device via an I/O request bnc1181504...

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0437-1)

The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to execute code in the kernel bnc1181349...

SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2021:0431-1)

This update for MozillaFirefox fixes the following issues : Firefox Extended Support Release 78.7.1 ESR bsc1181848 Fixed: Prevent access to NTFS special paths that could lead to filesystem corruption. Buffer overflow in depth pitch calculations for compressed textures Note that Tenable Network...

SUSE SLES12 Security Update : python36 (SUSE-SU-2021:0428-1)

This update for python36 fixes the following issues : buffer overflow in PyCArgrepr in ctypes/callproc.c, which may lead to remote code execution bsc1181126, CVE-2021-3177. Provide the newest setuptools wheel bsc1176262, CVE-2019-20916 in their correct form bsc1180686. Note that Tenable Network...

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0408-1)

This update for the Linux Kernel 4.4.180-94121 fixes several issues. The following security issues were fixed : CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver bsc1180562. CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have...

SUSE SLES12 Security Update : python3 (SUSE-SU-2021:0344-1)

This update for python3 fixes the following issues : Provide the newest setuptools wheel bsc1176262, CVE-2019-20916 in their correct form bsc1180686. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLES12 Security Update : openvswitch (SUSE-SU-2021:0284-1)

This update for openvswitch fixes the following issues : openvswitch was updated to 2.7.12 CVE-2020-27827: Fixed a memory leak when parsing lldp packets bsc1181345 A lot more minor bugs have been fixed with this openvswitch version. Please refer to the changelog of the openvswitch.rpm file in ord...

SUSE SLES12 Security Update : java-11-openjdk (SUSE-SU-2021:0275-1)

This update for java-11-openjdk fixes the following issues : java-11-openjdk was upgraded to include January 2021 CPU bsc1181239 Enable Sheandoah GC for x8664 jscECO-3171 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLES12 Security Update : cups (SUSE-SU-2021:0286-1)

This update for cups fixes the following issues : CVE-2020-10001: Fixed an out-of-bounds read in the ippReadIO function bsc1180520. CVE-2019-8842: Fixed an out-of-bounds read in an extension field bsc1170671. Note that Tenable Network Security has extracted the preceding description block directl...

SUSE SLES12 Security Update : openvswitch (SUSE-SU-2021:0276-1)

This update for openvswitch fixes the following issues : openvswitch was updated to 2.11.5 CVE-2020-27827: Fixed a memory leak when parsing lldp packets bsc1181345 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable ha...