SUSE SLED15 / SLES15 Security Update : postgresql13 (SUSE-SU-2021:0543-1)

This update for postgresql13 fixes the following issues : Upgrade to version 13.2 : - Updating stored views and reindexing might be needed after applying this update. - CVE-2021-3393, bsc1182040: Fix information leakage in constraint-violation error messages. - CVE-2021-20229, bsc1182039: Fix...

SUSE SLED15 / SLES15 Security Update : qemu (SUSE-SU-2021:0521-1)

This update for qemu fixes the following issues : Fixed potential privilege escalation in virtfs CVE-2021-20181 bsc1182137 Fixed out-of-bound access in iscsi CVE-2020-11947 bsc1180523 Fixed out-of-bound access in vmxnet3 emulation CVE-2021-20203 bsc1181639 Fixed out-of-bound access in ARM interru...

SUSE SLED15 / SLES15 Security Update : python3 (SUSE-SU-2021:0529-1)

This update for python3 fixes the following issues : CVE-2021-3177: Fixed buffer overflow in PyCArgrepr in ctypes/callproc.c, which may lead to remote code execution bsc1181126. Provide the newest setuptools wheel bsc1176262, CVE-2019-20916 in their correct form bsc1180686. Note that Tenable...

SUSE SLED15 / SLES15 Security Update : bind (SUSE-SU-2021:0507-1)

This update for bind fixes the following issues : CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack bsc1182246 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLED15 / SLES15 Security Update : php7 (SUSE-SU-2021:0494-1)

This update for php7 fixes the following issues : CVE-2021-21702 bsc1182049: NULL pointer dereference in SoapClient Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it...

SUSE SLED15 / SLES15 Security Update : screen (SUSE-SU-2021:0492-1)

This update for screen fixes the following issues : CVE-2021-26937: Fixed double width combining char handling that could lead to a denial of service or code execution bsc1182092. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLED15 / SLES15 Security Update : jasper (SUSE-SU-2021:0488-1)

This update for jasper fixes the following issues : bsc1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls bsc1181483 CVE-2021-3272: Fix buffer over-read in jp2decode Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLED15 / SLES15 Security Update : openvswitch (SUSE-SU-2021:0439-1)

This update for openvswitch fixes the following issues : CVE-2020-35498: Fixed a denial of service related to the handling of Ethernet padding bsc1181742. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempt...

SUSE SLES15 Security Update : containerd, docker, docker-runc, golang-github-docker-libnetwork (SUSE-SU-2021:0435-1)

This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues : Security issues fixed : CVE-2020-15257: Fixed a privilege escalation in containerd bsc1178969. CVE-2021-21284: potential privilege escalation when the root user in the remapped namespace...

SUSE SLED15 / SLES15 Security Update : wpa_supplicant (SUSE-SU-2021:0443-1)

This update for wpasupplicant fixes the following issues : CVE-2021-0326: P2P group information processing vulnerability bsc1181777. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLES15 Security Update : openvswitch (SUSE-SU-2021:0440-1)

This update for openvswitch fixes the following issues : CVE-2020-35498: Fixed a denial of service related to the handling of Ethernet padding bsc1181742. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempt...

SUSE SLED15 / SLES15 Security Update : openvswitch (SUSE-SU-2021:0436-1)

This update for openvswitch fixes the following issues : CVE-2020-35498: Fixed a denial of service related to the handling of Ethernet padding bsc1181742. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempt...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2021:0430-1)

This update for MozillaFirefox fixes the following issues : Firefox Extended Support Release 78.7.1 ESR bsc1181848 Fixed: Prevent access to NTFS special paths that could lead to filesystem corruption. Buffer overflow in depth pitch calculations for compressed textures Note that Tenable Network...

SUSE SLES15 Security Update : kernel (SUSE-SU-2021:0427-1)

The SUSE Linux Enterprise 15 SP2 realtime kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to execute code in the kernel bnc1181349...

SUSE SLED15 / SLES15 Security Update : subversion (SUSE-SU-2021:0425-1)

This update for subversion fixes the following issues : CVE-2020-17525: A null-pointer-dereference has been found in modauthzsvn that results in a remote unauthenticated Denial-of-Service in some server configurations bsc1181687. Note that Tenable Network Security has extracted the preceding...

SUSE SLED15 / SLES15 Security Update : java-11-openjdk (SUSE-SU-2021:0352-1)

This update for java-11-openjdk fixes the following issues : java-11-openjdk was upgraded to include January 2021 CPU bsc1181239 Enable Sheandoah GC for x8664 jscECO-3171 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED15 / SLES15 Security Update : cups (SUSE-SU-2021:0285-1)

This update for cups fixes the following issues : CVE-2020-10001: Fixed an out-of-bounds read in the ippReadIO function bsc1180520. CVE-2019-8842: Fixed an out-of-bounds read in an extension field bsc1170671. Note that Tenable Network Security has extracted the preceding description block directl...

SUSE SLES15 Security Update : openvswitch (SUSE-SU-2021:0277-1)

This update for openvswitch fixes the following issues : openvswitch was updated to 2.11.5 CVE-2020-27827: Fixed a memory leak when parsing lldp packets bsc1181345 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable ha...

SUSE SLED15 / SLES15 Security Update : openvswitch (SUSE-SU-2021:0300-1)

This update for openvswitch fixes the following issues : openvswitch was updated to 2.11.5 CVE-2020-27827: Fixed a memory leak when parsing lldp packets bsc1181345 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable ha...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2021:0259-1)

This update for MozillaFirefox fixes the following issues : Firefox Extended Support Release 78.7.0 ESR MFSA 2021-04, bsc1181414 - CVE-2021-23953: Fixed a Cross-origin information leakage via redirected PDF requests - CVE-2021-23954: Fixed a type confusion when using logical assignment operators ...