SUSE SLED15 / SLES15 Security Update : openvswitch (SUSE-SU-2021:0258-1)

This update for openvswitch fixes the following issues : openvswitch was updated to 2.13.2 CVE-2020-27827: Fixed a memory leak when parsing lldp packets bsc1181345 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable ha...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2021:0246-1)

This update for MozillaFirefox fixes the following issues : Firefox Extended Support Release 78.7.0 ESR MFSA 2021-04, bsc1181414 - CVE-2021-23953: Fixed a Cross-origin information leakage via redirected PDF requests - CVE-2021-23954: Fixed a type confusion when using logical assignment operators ...

SUSE SLES15 Security Update : nodejs8 (SUSE-SU-2021:0224-1)

This update for nodejs8 fixes the following issue : CVE-2020-8287: Fixed an HTTP request smuggling vulnerability bsc1180554. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE SLED15 / SLES15 Security Update : go1.15 (SUSE-SU-2021:0223-1)

This update for go1.15 fixes the following issues : Go was updated to version 1.15.7 bsc1175132. Security issues fixed : CVE-2021-3114: Fixed incorrect operations on the P-224 curve in crypto/elliptic bsc1181145. CVE-2021-3115: Fixed a potential arbitrary code execution in the build process...

SUSE SLED15 / SLES15 Security Update : go1.14 (SUSE-SU-2021:0222-1)

This update for go1.14 fixes the following issues : Go was updated to version 1.14.14 bsc1164903. Security issues fixed : CVE-2021-3114: Fixed incorrect operations on the P-224 curve in crypto/elliptic bsc1181145. CVE-2021-3115: Fixed a potential arbitrary code execution in the build process...

SUSE SLED15 / SLES15 Security Update : sudo (SUSE-SU-2021:0227-1)

This update for sudo fixes the following issues : A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges bsc1181090,CVE-2021-3156 It was possible for a user to test for the existence of a directory due to a Race Condition in sudoedit...

SUSE SLED15 / SLES15 Security Update : mutt (SUSE-SU-2021:0195-1)

This update for mutt fixes the following issue : CVE-2021-3181: Fixed a memory leak in recipient parsing bsc1181221. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format i...

SUSE SLED15 / SLES15 Security Update : permissions (SUSE-SU-2021:0197-1)

This update for permissions fixes the following issues : Update to version 20181224 : - pcp: remove no longer needed / conflicting entries bsc1171883, CVE-2020-8025 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable h...

SUSE SLES15 Security Update : stunnel (SUSE-SU-2021:0194-1)

This update for stunnel fixes the following issues : Security issue fixed : The 'redirect' option was fixed to properly handle 'verifyChain = yes' bsc1177580. Non-security issues fixed : Fix startup problem of the stunnel daemon bsc1178533 update to 5.57 : - Security bugfixes - New features - New...

SUSE SLED15 / SLES15 Security Update : gdk-pixbuf (SUSE-SU-2021:0184-1)

This update for gdk-pixbuf fixes the following issues : CVE-2020-29385: Fixed an infinite loop in lzw.c in the function writeindexes bsc1180393. Fixed an integer underflow in the GIF loader bsc1174307. Note that Tenable Network Security has extracted the preceding description block directly from...

SUSE SLED15 / SLES15 Security Update : postgresql, postgresql13 (SUSE-SU-2021:0175-1)

This update for postgresql, postgresql13 fixes the following issues : This update ships postgresql13. Upgrade to version 13.1 : CVE-2020-25695, bsc1178666: Block DECLARE CURSOR ... WITH HOLD and firing of deferred triggers within index expressions and materialized view queries. CVE-2020-25694,...

SUSE SLES15 Security Update : tcmu-runner (SUSE-SU-2021:0158-1)

This update for tcmu-runner fixes the following issue : CVE-2021-3139: Fixed a LIO security issue bsc1180676. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as mu...

SUSE SLES15 Security Update : dnsmasq (SUSE-SU-2021:0162-1)

This update for dnsmasq fixes the following issues : bsc1177077: Fixed DNSpooq vulnerabilities CVE-2020-25684, CVE-2020-25685, CVE-2020-25686: Fixed multiple Cache Poisoning attacks. CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25687: Fixed multiple potential Heap-based overflows when...

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2021:0153-1)

This update for ImageMagick fixes the following issues : CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel bsc1179202. CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage bsc1179208. CVE-2020-25666: Fixed an outside the range of representable values of type 'int...

SUSE SLED15 / SLES15 Security Update : dnsmasq (SUSE-SU-2021:0163-1)

This update for dnsmasq fixes the following issues : bsc1177077: Fixed DNSpooq vulnerabilities CVE-2020-25684, CVE-2020-25685, CVE-2020-25686: Fixed multiple Cache Poisoning attacks. CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25687: Fixed multiple potential Heap-based overflows when...

SUSE SLES15 Security Update : slurm_20_02 (SUSE-SU-2021:0139-1)

This update for slurm2002 fixes the following issues : Updated to 20.02.6, addresses two security fixes : - PMIx - fix potential buffer overflows from use of unpackmem. CVE-2020-27745 bsc1178890 - X11 forwarding - fix potential leak of the magic cookie when sent as an argument to the xauth comman...

SUSE SLED15 / SLES15 Security Update : open-iscsi (SUSE-SU-2021:0127-1)

This update for open-iscsi fixes the following issues : Updated to upstream version 2.1.3 as 2.1.3-suse, for bsc1179908, including : - uip: check for TCP urgent pointer past end of frame - uip: check for u8 overflow when processing TCP options - uip: check for header length underflow during...

SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2021:0118-1)

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-28374: Fixed a Linux SCSI target issue bsc1178372. CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver bsc1180559...

SUSE SLED15 / SLES15 Security Update : php7 (SUSE-SU-2021:0124-1)

This update for php7 fixes the following issue : CVE-2020-7071: Fixed an insufficient filter in parseurl that accepted URLs with invalid userinfo bsc1180706. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLED15 / SLES15 Security Update : openldap2 (SUSE-SU-2021:0129-1)

This update for openldap2 fixes the following issues : Security issues fixed : CVE-2020-25709: Fixed a crash caused by specially crafted network traffic bsc1178909. CVE-2020-25710: Fixed a crash caused by specially crafted network traffic bsc1178909. Non-security issue fixed : Retry binds in the...