SUSE SLED15 / SLES15 Security Update : glib2 (SUSE-SU-2021:0778-1)

This update for glib2 fixes the following issues : CVE-2021-27218: gbytearraynewtake takes a gsize as length but stores in a guint, this patch will refuse if the length is larger than guint. bsc1182328 CVE-2021-27219: gmemdup takes a guint as parameter and sometimes leads into an integer overflow...

SUSE SLED15 / SLES15 Security Update : s390-tools (SUSE-SU-2021:0777-1)

This update for s390-tools fixes the following issues : Fixed an issue where IPL was not working when bootloader was installed on a SCSI disk with 4k physical blocksize without using a devicemapper target bsc1183041. CVE-2021-25316: Do not use predictable temporary file names bsc1182777. Made the...

SUSE SLED15 / SLES15 Security Update : python (SUSE-SU-2021:0768-1)

This update for python fixes the following issues : python27 was upgraded to 2.7.18 CVE-2021-23336: Fixed a potential web cache poisoning by using a semicolon in query parameters use of semicolon as a query string separator bsc1182379. Note that Tenable Network Security has extracted the precedin...

SUSE SLES15 Security Update : openssl-1_0_0 (SUSE-SU-2021:0769-1)

This update for openssl-100 fixes the following issues : CVE-2021-23840: Fixed an Integer overflow in CipherUpdate bsc1182333 CVE-2021-23841: Fixed a NULL pointer dereference in X509issuerandserialhash bsc1182331 Note that Tenable Network Security has extracted the preceding description block...

SUSE SLES15 Security Update : libsolv, libzypp, yast2-installation, zypper (SUSE-SU-2021:0770-1)

This update for libsolv, libzypp, yast2-installation, zypper fixes the following issues : Update zypper to version 1.14.43 : doc: give more details about creating versioned package locks bsc1181622 man: Document synonymously used patch categories bsc1179847 Fix source-download commnds help...

SUSE SLES15 Security Update : kernel (SUSE-SU-2021:0735-1)

The SUSE Linux Enterprise 15 SP2 kernel RT was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping XSA-365 bsc1181843. CVE-2021-26931: Fixed an issue where Linux kernel was treating...

SUSE SLES15 Security Update : kernel (SUSE-SU-2021:0737-1)

The SUSE Linux Enterprise 15 SP1 kernel was updated receive various security and bugfixes. The following security bugs were fixed : CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping XSA-365 bsc1181843. CVE-2021-26931: Fixed an issue where Linux kernel was treating grant...

SUSE SLES15 Security Update : openssl-1_1 (SUSE-SU-2021:0753-1)

This update for openssl-11 fixes the following issues : CVE-2021-23840: Fixed an Integer overflow in CipherUpdate bsc1182333 CVE-2021-23841: Fixed a NULL pointer dereference in X509issuerandserialhash bsc1182331 Note that Tenable Network Security has extracted the preceding description block...

SUSE SLES15 Security Update : 389-ds (SUSE-SU-2021:0724-1)

This update for 389-ds fixes the following issues : 389-ds was updated to version 1.4.3.19 - CVE-2020-35518: Fixed an information disclosure during the binding of a DN bsc1181159. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLES15 Security Update : openssl-1_1 (SUSE-SU-2021:0755-1)

This update for openssl-11 fixes the following issues : CVE-2021-23840: Fixed an Integer overflow in CipherUpdate bsc1182333 CVE-2021-23841: Fixed a NULL pointer dereference in X509issuerandserialhash bsc1182331 Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED15 / SLES15 Security Update : wpa_supplicant (SUSE-SU-2021:0721-1)

This update for wpasupplicant fixes the following issues : CVE-2021-27803: Fixed a P2P provision discovery processing vulnerability bsc1182805. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED15 / SLES15 Security Update : openssl-1_1 (SUSE-SU-2021:0754-1)

This update for openssl-11 fixes the following issues : CVE-2021-23840: Fixed an Integer overflow in CipherUpdate bsc1182333 CVE-2021-23841: Fixed a NULL pointer dereference in X509issuerandserialhash bsc1182331 Fixed unresolved error codes in FIPS bsc1182959. Note that Tenable Network Security h...

SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2021:0741-1)

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping XSA-365 bsc1181843. CVE-2021-26931: Fixed an issue where Linux kernel was treating gra...

SUSE SLED15 / SLES15 Security Update : git (SUSE-SU-2021:0757-1)

This update for git fixes the following issues : On case-insensitive filesystems, with support for symbolic links, if Git is configured globally to apply delay-capable clean/smudge filters such as Git LFS, Git could be fooled into running remote code during a clone. bsc1183026, CVE-2021-21300 Not...

SUSE SLES15 Security Update : freeradius-server (SUSE-SU-2021:0714-1)

This update for freeradius-server fixes the following issues : move logrotate options into specific parts for each log as 'global' options will persist past and clobber global options in the main logrotate config bsc1180525 Note that Tenable Network Security has extracted the preceding descriptio...

SUSE SLES15 Security Update : python-cryptography (SUSE-SU-2021:0696-1)

This update for python-cryptography fixes the following issues : CVE-2020-36242: Using the Fernet class to symmetrically encrypt multi gigabyte values could result in an integer overflow and buffer overflow bsc1182066. Note that Tenable Network Security has extracted the preceding description blo...

SUSE SLES15 Security Update : postgresql12 (SUSE-SU-2021:0695-1)

This update for postgresql12 fixes the following issues : Upgrade to version 12.6 : Reindexing might be needed after applying this update. CVE-2021-3393, bsc1182040: Fix information leakage in constraint-violation error messages. Note that Tenable Network Security has extracted the preceding...

SUSE SLED15 / SLES15 Security Update : grub2 (SUSE-SU-2021:0683-1)

This update for grub2 fixes the following issues : grub2 implements the new 'SBAT' method for SHIM based secure boot revocation. bsc1182057 CVE-2020-25632: Fixed a use-after-free in rmmod command bsc1176711 CVE-2020-25647: Fixed an out-of-bound write in grubusbdeviceinitialize bsc1177883...

SUSE SLED15 / SLES15 Security Update : gnome-autoar (SUSE-SU-2021:0687-1)

This update for gnome-autoar fixes the following issues : CVE-2020-36241: Skip problematic files that might be extracted outside of the destination dir to prevent potential directory traversal bsc1181930. Note that Tenable Network Security has extracted the preceding description block directly fr...

SUSE SLES15 Security Update : nodejs10 (SUSE-SU-2021:0674-1)

This update for nodejs10 fixes the following issues : New upstream LTS version 10.24.0 : CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion bsc1182619 CVE-2021-22884: DNS rebinding in --inspect bsc1182620 CVE-2021-23840: OpenSSL - Integer overflow in CipherUpda...