SUSE SLED15 / SLES15 Security Update : bind (SUSE-SU-2021:1826-1)

This update for bind fixes the following issues : CVE-2021-25214: Fixed a broken inbound incremental zone update IXFR which could have caused named to terminate unexpectedly bsc1185345. CVE-2021-25215: Fixed an assertion check which could have failed while answering queries for DNAME records that...

SUSE SLED15 / SLES15 Security Update : gstreamer, gstreamer-plugins-bad, gstreamer-plugins-base, gstreamer-plugins-good, gstreamer-plugins-ugly (SUSE-SU-2021:1819-1)

This update for gstreamer, gstreamer-plugins-bad, gstreamer-plugins-base, gstreamer-plugins-good, gstreamer-plugins-ugly fixes the following issues : gstreamer was updated to version 1.16.3 bsc1181255 : delay creation of threadpools bin: Fix deep-element-removed log message buffer: fix meta...

SUSE SLED15 / SLES15 Security Update : ceph (SUSE-SU-2021:1834-1)

This update for ceph fixes the following issues : Update to 15.2.12-83-g528da226523 : CVE-2021-3509 fix cookie injection issue bsc1186021 CVE-2021-3531 RGWSwiftWebsiteHandler::iswebdir checks empty subdirname bsc1186020 CVE-2021-3524 sanitize \r in s3 CORSConfigurations ExposeHeader bsc1185619 No...

SUSE SLES15 Security Update : nginx (SUSE-SU-2021:1839-1)

This update for nginx fixes the following issues : CVE-2021-23017: nginx DNS resolver off-by-one heap write bsc1186126 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format...

SUSE SLES15 Security Update : nginx (SUSE-SU-2021:1815-1)

This update for nginx fixes the following issues : CVE-2021-23017: nginx DNS resolver off-by-one heap write bsc1186126 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format...

SUSE SLES15 Security Update : slurm (SUSE-SU-2021:1810-1)

This update for slurm fixes the following issues : CVE-2021-31215: Fixed a environment mishandling that allowed remote code execution as SlurmUser bsc1186024. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLED15 / SLES15 Security Update : postgresql13 (SUSE-SU-2021:1785-1)

This update for postgresql13 fixes the following issues : Upgrade to version 13.3 : CVE-2021-32027: Fixed integer overflows in array subscripting calculations bsc1185924. CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists bsc1185925. CVE-2021-32029...

SUSE SLES15 Security Update : nginx (SUSE-SU-2021:1814-1)

This update for nginx fixes the following issues : CVE-2021-23017: nginx DNS resolver off-by-one heap write bsc1186126 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format...

SUSE SLES15 Security Update : curl (SUSE-SU-2021:1809-1)

This update for curl fixes the following issues : CVE-2021-22876: Fixed an issue where the automatic referer was leaking credentials bsc1183933. CVE-2021-22898: Fixed curl TELNET stack contents disclosure bsc1186114. Fix for SFTP uploads when it results in empty uploaded files bsc1177976. Allow...

SUSE SLES15 Security Update : nginx (SUSE-SU-2021:1792-1)

This update for nginx fixes the following issues : CVE-2021-23017: nginx DNS resolver off-by-one heap write bsc1186126 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format...

SUSE SLED15 / SLES15 Security Update : libX11 (SUSE-SU-2021:1765-1)

This update for libX11 fixes the following issues : CVE-2021-31535: Fixed missing request length checks in libX11 bsc1182506. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE SLED15 / SLES15 Security Update : hivex (SUSE-SU-2021:1761-1)

This update for hivex fixes the following issues : CVE-2021-3504: hivex: missing bounds check within hivexopen bsc1185013 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2021:1762-1)

This update for curl fixes the following issues : CVE-2021-22898: Fixed curl TELNET stack contents disclosure bsc1186114. Allow partial chain verification jscSLE-17956 - Have intermediate certificates in the trust store be treated as trust-anchors, in the same way as self-signed root CA...

SUSE SLED15 / SLES15 Security Update : libu2f-host (SUSE-SU-2021:1755-1)

This update for libu2f-host fixes the following issues : This update ships the u2f-host package jscECO-3687 bsc1184648 Version 1.1.10 released 2019-05-15 Add new devices to udev rules. Fix a potentially uninitialized buffer CVE-2019-9578, bsc1128140 Version 1.1.9 released 2019-03-06 Fix CID copyi...

SUSE SLED15 / SLES15 Security Update : libass (SUSE-SU-2021:1664-1)

This update for libass fixes the following issues : CVE-2020-24994: Fixed a stack overflow in the parsetag bsc1184153. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format...

SUSE SLED15 / SLES15 Security Update : libxml2 (SUSE-SU-2021:1654-1)

This update for libxml2 fixes the following issues : CVE-2021-3537: NULL pointer dereference in valid.c:xmlValidBuildAContentModel bsc1185698 CVE-2021-3518: Fixed a use after free in xinclude.c:xmlXIncludeDoProcess bsc1185408. CVE-2021-3517: Fixed a heap-based buffer overflow in...

SUSE SLED15 / SLES15 Security Update : lz4 (SUSE-SU-2021:1647-1)

This update for lz4 fixes the following issues : CVE-2021-3520: Fixed memory corruption due to an integer overflow bug caused by memmove argument bsc1185438. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLED15 / SLES15 Security Update : Recommended update for grub2 (SUSE-SU-2021:1636-1)

This update for grub2 fixes the following issues : Fixed error with the shimlock protocol that is not found on aarch64 bsc1185580. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clea...

SUSE SLES15 Security Update : djvulibre (SUSE-SU-2021:1649-1)

This update for djvulibre fixes the following issues : Security issues fixed : CVE-2021-32490 bsc1185895, Out of bounds write in function DJVU:filterbv via crafted djvu file CVE-2021-32491 bsc1185900, Integer overflow in function render in tools/ddjvu via crafted djvu file CVE-2021-32492...

SUSE SLED15 / SLES15 Security Update : djvulibre (SUSE-SU-2021:1641-1)

This update for djvulibre fixes the following issues : CVE-2021-32490 bsc1185895: Out of bounds write in function DJVU:filterbv via crafted djvu file CVE-2021-32491 bsc1185900: Integer overflow in function render in tools/ddjvu via crafted djvu file CVE-2021-32492 bsc1185904: Out of bounds read i...