SUSE SLES15 Security Update : kernel (SUSE-SU-2021:1211-1)

The SUSE Linux Enterprise 15 SP2 kernel RT was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2021-3444: Fixed an issue with the bpf verifier which did not properly handle mod32 destination register truncation when the source register was known to b...

SUSE SLES15 Security Update : xorg-x11-server (SUSE-SU-2021:1188-1)

This update for xorg-x11-server fixes the following issues : CVE-2021-3472: XChangeFeedbackControl Integer Underflow Privilege Escalation bsc1180128 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED15 / SLES15 Security Update : clamav (SUSE-SU-2021:1190-1)

This update for clamav fixes the following issues : CVE-2021-1252: Fix for Excel XLM parser infinite loop. bsc1184532 CVE-2021-1404: Fix for PDF parser buffer over-read; possible crash. bsc1184533 CVE-2021-1405: Fix for mail parser NULL-dereference crash. bsc1184534 Fix errors when scanning files...

SUSE SLED15 / SLES15 Security Update : opensc (SUSE-SU-2021:1168-1)

This update for opensc fixes the following issues : CVE-2019-15945: Fixed an out-of-bounds access of an ASN.1 Bitstring in decodebitstring bsc1149746. CVE-2019-15946: Fixed an out-of-bounds access of an ASN.1 Octet string in asn1decodeentry bsc1149747 CVE-2019-19479: Fixed an incorrect read...

SUSE SLES15 Security Update : spamassassin (SUSE-SU-2021:1153-1)

This update for spamassassin fixes the following issues : CVE-2019-12420: memory leak via crafted messages bsc1159133 CVE-2020-1946: security update bsc1184221 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLED15 / SLES15 Security Update : cifs-utils (SUSE-SU-2021:1161-1)

This update for cifs-utils fixes the following issues : CVE-2021-20208: Fixed a potential kerberos auth leak escaping from container bsc1183239 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLES15 Security Update : open-iscsi (SUSE-SU-2021:1164-1)

This update for open-iscsi fixes the following issues : CVE-2020-17437: uIP Out-of-Bounds Write bsc1179908 CVE-2020-17438: uIP Out-of-Bounds Write bsc1179908 CVE-2020-13987: uIP Out-of-Bounds Read bsc1179908 CVE-2020-13988: uIP Integer Overflow bsc1179908 Enabled no-wait '-W' iscsiadm option for...

SUSE SLED15 / SLES15 Security Update : wpa_supplicant (SUSE-SU-2021:1166-1)

This update for wpasupplicant fixes the following issues : CVE-2021-30004: Fixed an issue where forging attacks might have occured because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c bsc1184348. Note that Tenable Network Security has extracted the preceding...

SUSE SLED15 / SLES15 Security Update : xorg-x11-server (SUSE-SU-2021:1182-1)

This update for xorg-x11-server fixes the following issues : CVE-2021-3472: XChangeFeedbackControl Integer Underflow Privilege Escalation bsc1180128 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED15 / SLES15 Security Update : spamassassin (SUSE-SU-2021:1163-1)

This update for spamassassin fixes the following issues : CVE-2019-12420: memory leak via crafted messages bsc1159133 CVE-2020-1946: security update bsc1184221 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLES15 Security Update : xorg-x11-server (SUSE-SU-2021:1179-1)

This update for xorg-x11-server fixes the following issues : CVE-2021-3472: XChangeFeedbackControl Integer Underflow Privilege Escalation bsc1180128 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLES15 Security Update : umoci (SUSE-SU-2021:1116-1)

This update for umoci fixes the following issues : Update to umoci v0.4.6. CVE-2021-29136: malicious layer allows overwriting of host files bsc1184147 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted t...

SUSE SLED15 / SLES15 Security Update : tpm2-tss-engine (SUSE-SU-2021:1113-1)

This update for tpm2-tss-engine fixes the following issues : Added support to disable fixed compilation flags Added --disable-defaultflags during compilation to avoid breakage of our gcc-PIE profile resulted in non-position-independent executable tpm2-tss-genkey, bsc1183895 Note that Tenable...

SUSE SLED15 / SLES15 Security Update : fwupd (SUSE-SU-2021:1107-1)

This update for fwupd fixes the following issues : Update to version 1.2.14: bsc1182057 Add SBAT section to EFI images bsc1182057 CVE-2020-10759: Validate that gpgmeopverifyresult returned at least one signature bsc1172643 Note that Tenable Network Security has extracted the preceding description...

SUSE SLED15 / SLES15 Security Update : fwupdate (SUSE-SU-2021:1104-1)

This update for fwupdate fixes the following issues : Add SBAT section to EFI images bsc1182057 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible...

SUSE SLED15 / SLES15 Security Update : openexr (SUSE-SU-2021:1097-1)

This update for openexr fixes the following issues : CVE-2021-3474: Undefined-shift in Imf25::FastHufDecoder::FastHufDecoder bsc1184174 CVE-2021-3475: Integer-overflow in Imf25::calculateNumTiles bsc1184173 CVE-2021-3476: Undefined-shift in Imf25::unpack14 bsc1184172 Note that Tenable Network...

SUSE SLED15 / SLES15 Security Update : gssproxy (SUSE-SU-2021:1029-1)

This update for gssproxy fixes the following issues : CVE-2020-12658: Fixed an issue where gssproxy was not unlocking condmutex before pthread exit in gpworkermain bsc1180515. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2021:1028-1)

This update for xen fixes the following issues : CVE-2021-3308: VUL-0: xen: IRQ vector leak on x86 bsc1181254, XSA-360 CVE-2021-28687: HVM soft-reset crashes toolstack bsc1183072, XSA-368 L3: conring size for XEN HV's with huge memory to small. Inital Xen logs cut bsc1177204 L3: XEN domU crashed ...

SUSE SLED15 / SLES15 Security Update : OpenIPMI (SUSE-SU-2021:1010-1)

This update for OpenIPMI fixes the following issues : Fixed an issue where OpenIPMI was creating non-position independent binaries bsc1183178. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2021:1007-1)

This update for MozillaFirefox fixes the following issues : Firefox was updated to 78.9.0 ESR MFSA 2021-11, bsc1183942 - CVE-2021-23981: Texture upload into an unbound backing buffer resulted in an out-of-bound read - CVE-2021-23982: Internal network hosts could have been probed by a malicious...