SUSE SLED15 / SLES15 Security Update : fribidi (SUSE-SU-2021:1655-1)

This update for fribidi fixes the following issues : Security issues fixed : CVE-2019-18397: Avoid buffer overflow. bsc1156260 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean an...

SUSE SLED15 / SLES15 Security Update : graphviz (SUSE-SU-2021:1651-1)

This update for graphviz fixes the following issues : CVE-2020-18032: Fixed possible remote code execution via buffer overflow bsc1185833. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLES15 Security Update : kernel (SUSE-SU-2021:1624-1)

The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-36312: Fixed an issue in virt/kvm/kvmmain.c that had a kvmiobusunregisterdev memory leak upon a kmalloc failure bnc1184509. CVE-2021-29650: Fixed an...

SUSE SLES15 Security Update : ibsim (SUSE-SU-2021:1606-1)

This update for ibsim fixes the following issues : Hardening: link as position independent executable bsc1184123. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it a...

SUSE SLED15 / SLES15 Security Update : dtc (SUSE-SU-2021:1598-1)

This update for dtc fixes the following issues : make all packaged binaries PIE-executables bsc1184122. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as...

SUSE SLED15 / SLES15 Security Update : ipvsadm (SUSE-SU-2021:1599-1)

This update for ipvsadm fixes the following issues : Hardening: link as position independent executable bsc1184988. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it...

SUSE SLES15 Security Update : ibutils (SUSE-SU-2021:1597-1)

This update for ibutils fixes the following issues : Hardening: Link ibis executable with -pie bsc1184123. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much ...

SUSE SLES15 Security Update : kernel (SUSE-SU-2021:1571-1)

The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2021-29650: Fixed an issue with the netfilter subsystem that allowed attackers to cause a denial of service panic because net/netfilter/xtables.c and...

SUSE SLES15 Security Update : kernel (SUSE-SU-2021:1573-1)

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-36312: Fixed an issue in virt/kvm/kvmmain.c that had a kvmiobusunregisterdev memory leak upon a kmalloc failure bnc1184509. CVE-2021-29650: Fixed an issue...

SUSE SLED15 / SLES15 Security Update : openvpn (SUSE-SU-2021:1577-1)

This update for openvpn fixes the following issues : CVE-2020-15078: Fixed authentication bypass with deferred authentication bsc1185279. CVE-2020-11810: Fixed race condition between allocating peer-id and initializing data channel key bsc1169925. CVE-2018-7544: Fixed cross-protocol scripting iss...

SUSE SLED15 / SLES15 Security Update : shim (SUSE-SU-2021:1564-1)

This update for shim fixes the following issues : Update to the unified shim binary for SBAT support bsc1182057 + Merged EKU codesign check bsc1177315 shim-install: Always assume 'removable' for Azure to avoid the endless reset loop bsc1185464. Note that Tenable Network Security has extracted the...

SUSE SLED15 / SLES15 Security Update : python3 (SUSE-SU-2021:1557-1)

This update for python3 fixes the following issues : CVE-2021-3426: Fixed an information disclosure via pydoc bsc1183374 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and form...

SUSE SLED15 / SLES15 Security Update : libxml2 (SUSE-SU-2021:1523-1)

This update for libxml2 fixes the following issues : CVE-2021-3518: Fixed a use after free in xinclude.c:xmlXIncludeDoProcess bsc1185408. CVE-2021-3517: Fixed a heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal bsc1185410. CVE-2021-3516: Fixed a use after free in...

SUSE SLED15 / SLES15 Security Update : bind (SUSE-SU-2021:1471-1)

This update for bind fixes the following issues : CVE-2021-25214: Fixed a broken inbound incremental zone update IXFR which could have caused named to terminate unexpectedly bsc1185345. CVE-2021-25215: Fixed an assertion check which could have failed while answering queries for DNAME records that...

SUSE SLED15 / SLES15 Security Update : ceph (SUSE-SU-2021:1474-1)

This update for ceph fixes the following issues : ceph was updated to 15.2.11-83-g8a15f484c2 : - CVE-2021-20288: Fixed unauthorized globalid reuse bsc1183074. - disk gets replaced with no rocksdb/wal bsc1184231. - BlueStore handles huge4GB writes from RocksDB to BlueFS poorly, potentially causing...

SUSE SLED15 / SLES15 Security Update : permissions (SUSE-SU-2021:1466-1)

This update for permissions fixes the following issues : etc/permissions: remove unnecessary entries bsc1182899 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as...

SUSE SLES15 Security Update : ceph (SUSE-SU-2021:1473-1)

This update for ceph fixes the following issues : ceph was updated to 14.2.20-402-g6aa76c6815 : - CVE-2021-20288: Fixed unauthorized globalid reuse bsc1183074. - CVE-2020-25678: Do not add sensitive information in Ceph log files bsc1178905. - CVE-2020-27839: Use secure cookies to store JWT Token...

SUSE SLED15 / SLES15 Security Update : p7zip (SUSE-SU-2021:1491-1)

This update for p7zip fixes the following issues : CVE-2021-3465: Fixed a NULL pointer dereference in NCompress:CCopyCoder:Code bsc1184699 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLES15 Security Update : webkit2gtk3 (SUSE-SU-2021:1499-1)

This update for webkit2gtk3 fixes the following issues : Update to version 2.32.0 bsc1184155 : - Fix the authentication request port when URL omits the port. - Fix iframe scrolling when main frame is scrolled in async - scrolling mode. - Stop using gmemdup. - Show a warning message when overridin...

SUSE SLES15 Security Update : samba (SUSE-SU-2021:1498-1)

This update for samba fixes the following issues : CVE-2021-20277: Fixed an out of bounds read in ldbhandlerfold bsc1183574. CVE-2021-20254: Fixed a buffer overrun in sidstounixids bsc1184677. CVE-2020-27840: Fixed an unauthenticated remote heap corruption via bad DNs bsc1183572. Avoid free'ing o...