SUSE SLED15 / SLES15 Security Update : openexr (SUSE-SU-2021:1489-1)

This update for openexr fixes the following issues : CVE-2021-23215: Fixed an integer-overflow in Imf25:DwaCompressor:initializeBuffers bsc1185216. CVE-2021-26260: Fixed an Integer-overflow in Imf25:DwaCompressor:initializeBuffers bsc1185217. CVE-2021-20296: Fixed a NULL pointer dereference in...

SUSE SLED15 / SLES15 Security Update : avahi (SUSE-SU-2021:1493-1)

This update for avahi fixes the following issues : CVE-2021-3468: avoid infinite loop by handling HUP event in clientwork bsc1184521. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLES15 Security Update : stunnel (SUSE-SU-2021:1465-1)

This update for stunnel fixes the following issues : Security fix: bsc1177580, bsc1182529, CVE-2021-20230 - 'redirect' option does not properly handle 'verifyChain = yes' Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLES15 Security Update : xen (SUSE-SU-2021:1460-1)

This update for xen fixes the following issues : CVE-2020-28368: Intel RAPL sidechannel attack aka PLATYPUS attack bsc1178591, XSA-351 CVE-2021-3308: IRQ vector leak on x86 bsc1181254, XSA-360 CVE-2021-28687: HVM soft-reset crashes toolstack bsc1183072, XSA-368 L3: conring size for XEN HV's with...

SUSE SLED15 / SLES15 Security Update : cups (SUSE-SU-2021:1454-1)

This update for cups fixes the following issues : CVE-2021-25317: ownership of /var/log/cups could allow privilege escalation from lp user to root via symlink attacks bsc1184161 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLES15 Security Update : cifs-utils (SUSE-SU-2021:1455-1)

This update for cifs-utils fixes the following security issues : CVE-2021-20208: Fixed a potential kerberos auth leak escaping from container. bsc1183239 CVE-2020-14342: Fixed a shell command injection vulnerability in mount.cifs. bsc1174477 This update for cifs-utils fixes the following issues :...

SUSE SLES15 Security Update : MozillaFirefox (SUSE-SU-2021:1433-1)

This update for MozillaFirefox fixes the following issues : Mozilla Firefox was updated to 78.10.0 ESR bsc1184960 - CVE-2021-23994: Out of bound write due to lazy initialization - CVE-2021-23995: Use-after-free in Responsive Design Mode - CVE-2021-23998: Secure Lock icon could have been spoofed -...

SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2021:1444-1)

This update for samba fixes the following issues : CVE-2021-20277: Fixed an out of bounds read in ldbhandlerfold bsc1183574. CVE-2021-20254: Fixed a buffer overrun in sidstounixids bsc1184677. CVE-2020-27840: Fixed an unauthenticated remote heap corruption via bad DNs bsc1183572. Avoid free'ing o...

SUSE SLES15 Security Update : samba (SUSE-SU-2021:1445-1)

This update for samba fixes the following issues : CVE-2021-20254: Fixed a buffer overrun in sidstounixids bsc1184677. Avoid free'ing our own pointer in memcache when memcachetrim attempts to reduce cache size bsc1179156. Adjust smbcacls '--propagate-inheritance' feature to align with upstream...

SUSE SLED15 / SLES15 Security Update : giflib (SUSE-SU-2021:1409-1)

This update for giflib fixes the following issues : Enable Position Independent Code and inherit CFLAGS from the build system bsc1184123. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatical...

SUSE SLED15 / SLES15 Security Update : libnettle (SUSE-SU-2021:1412-1)

This update for libnettle fixes the following issues : CVE-2021-20305: Fixed the multiply function which was being called with out-of-range scalars bsc1184401. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLED15 / SLES15 Security Update : librsvg (SUSE-SU-2021:1408-1)

This update for librsvg fixes the following issues : librsvg was updated to 2.46.5 : - Update dependent crates that had security vulnerabilities: smallvec to 0.6.14 - RUSTSEC-2018-0003 - CVE-2021-25900 bsc1183403 Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2021:1307-1)

This update for MozillaFirefox fixes the following issues : Firefox was updated to 78.10.0 ESR bsc1184960 - CVE-2021-23994: Out of bound write due to lazy initialization - CVE-2021-23995: Use-after-free in Responsive Design Mode - CVE-2021-23998: Secure Lock icon could have been spoofed -...

SUSE SLES15 Security Update : pcp (SUSE-SU-2021:1292-1)

This update for pcp fixes the following issues : Fixed completely CVE-2020-8025 bsc1171883 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible...

SUSE SLED15 / SLES15 Security Update : sudo (SUSE-SU-2021:1275-1)

This update for sudo fixes the following issues : L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 bsc1183936 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2021:1276-1)

This update for ImageMagick fixes the following issues : CVE-2021-20309: Division by zero in WaveImage of MagickCore/visual-effects. bsc1184624 CVE-2021-20311: Division by zero in sRGBTransformImage in MagickCore/colorspace.c bsc1184626 CVE-2021-20312: Integer overflow in WriteTHUMBNAILImage of...

SUSE SLED15 / SLES15 Security Update : ruby2.5 (SUSE-SU-2021:1280-1)

This update for ruby2.5 fixes the following issues : Update to 2.5.9 CVE-2021-28965: XML round-trip vulnerability in REXML bsc1184644 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLED15 / SLES15 Security Update : qemu (SUSE-SU-2021:1243-1)

This update for qemu fixes the following issues : CVE-2020-12829: Fix OOB access in sm501 device emulation bsc1172385 CVE-2020-25723: Fix use-after-free in usb xhci packet handling bsc1178934 CVE-2020-25084: Fix use-after-free in usb ehci packet handling bsc1176673 CVE-2020-25625: Fix infinite lo...

SUSE: Security Advisory (SUSE-SU-2020:2266-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : qemu (SUSE-SU-2021:1244-1)

This update for qemu fixes the following issues : Fix OOB access in sm501 device emulation CVE-2020-12829, bsc1172385 Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation CVE-2020-13362 bsc1172383 Fix use-after-free in usb xhci packet handling CVE-2020-25723, bsc1178934 Fix use-after-free...