SUSE SLES12 Security Update : fwupdate (SUSE-SU-2021:1123-1)

This update for fwupdate fixes the following issues : Add SBAT section to EFI images bsc1182057 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible...

SUSE SLED15 / SLES15 Security Update : fwupdate (SUSE-SU-2021:1104-1)

This update for fwupdate fixes the following issues : Add SBAT section to EFI images bsc1182057 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible...

SUSE SLED15 / SLES15 Security Update : ceph (SUSE-SU-2021:1108-1)

This update for ceph fixes the following issues : ceph was updated to to 15.2.9 cephadm: fix 'inspect' and 'pull' bsc1182766 CVE-2020-27839: mgr/dashboard: Use secure cookies to store JWT Token bsc1179997 CVE-2020-25678: Do not add sensitive information in Ceph log files bsc1178905...

SUSE SLED15 / SLES15 Security Update : openexr (SUSE-SU-2021:1097-1)

This update for openexr fixes the following issues : CVE-2021-3474: Undefined-shift in Imf25::FastHufDecoder::FastHufDecoder bsc1184174 CVE-2021-3475: Integer-overflow in Imf25::calculateNumTiles bsc1184173 CVE-2021-3476: Undefined-shift in Imf25::unpack14 bsc1184172 Note that Tenable Network...

SUSE SLED15 / SLES15 Security Update : OpenIPMI (SUSE-SU-2021:1010-1)

This update for OpenIPMI fixes the following issues : Fixed an issue where OpenIPMI was creating non-position independent binaries bsc1183178. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLES12 Security Update : tar (SUSE-SU-2021:0975-1)

This update for tar fixes the following issues : - CVE-2021-20193: Memory leak in readheader in list.c bsc1181131 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it a...

SUSE SLES15 Security Update : libzypp, zypper (SUSE-SU-2021:0956-1)

This update for libzypp, zypper fixes the following issues : Update zypper to version 1.14.43 : doc: give more details about creating versioned package locks bsc1181622 man: Document synonymously used patch categories bsc1179847 Fix source-download commands help bsc1180663 man: Recommend to use t...

openSUSE Security Update : libass (openSUSE-2021-472)

This update for libass fixes the following issues : - CVE-2020-26682: Fixed a signed integer overflow in the call to outlinestroke bsc1177862. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plug...

SUSE SLED15 / SLES15 Security Update : openssl-1_1 (SUSE-SU-2021:0955-1)

This update for openssl-11 fixes the security issue : CVE-2021-3449: An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signaturealgorithms extension but includes a signaturealgorithmscert...

SUSE SLES15 Security Update : glib2 (SUSE-SU-2021:0890-1)

This update for glib2 fixes the following issues : CVE-2021-27218: gbytearraynewtake takes a gsize as length but stores in a guint, this patch will refuse if the length is larger than guint. bsc1182328 CVE-2021-27219: gmemdup takes a guint as parameter and sometimes leads into an integer overflow...

SUSE SLES12 Security Update : glib2 (SUSE-SU-2021:0801-1)

This update for glib2 fixes the following issues : CVE-2021-27218: gbytearraynewtake takes a gsize as length but stores in a guint, this patch will refuse if the length is larger than guint. bsc1182328 CVE-2021-27219: gmemdup takes a guint as parameter and sometimes leads into an integer overflow...

SUSE SLES15 Security Update : kernel (SUSE-SU-2021:0740-1)

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping XSA-365 bsc1181843. CVE-2021-26931: Fixed an issue where Linux kernel was treating grant...

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0742-1)

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bug was fixed : CVE-2021-3348: Fixed a use-after-free read in nbdqueuerq bsc1181504. The update package also includes non-security fixes. See advisory for details. Note that Tenabl...

SUSE SLED15 / SLES15 Security Update : git (SUSE-SU-2021:0757-1)

This update for git fixes the following issues : On case-insensitive filesystems, with support for symbolic links, if Git is configured globally to apply delay-capable clean/smudge filters such as Git LFS, Git could be fooled into running remote code during a clone. bsc1183026, CVE-2021-21300 Not...

SUSE SLES15 Security Update : freeradius-server (SUSE-SU-2021:0714-1)

This update for freeradius-server fixes the following issues : move logrotate options into specific parts for each log as 'global' options will persist past and clobber global options in the main logrotate config bsc1180525 Note that Tenable Network Security has extracted the preceding descriptio...

openSUSE Security Update : qemu (openSUSE-2021-363)

This update for qemu fixes the following issues : - Fixed potential privilege escalation in virtfs CVE-2021-20181 bsc1182137 - Fixed out-of-bound access in iscsi CVE-2020-11947 bsc1180523 - Fixed out-of-bound access in vmxnet3 emulation CVE-2021-20203 bsc1181639 - Fixed out-of-bound access in ARM...

openSUSE Security Update : salt (openSUSE-2021-347)

This update for salt fixes the following issues : - Fix regression on cmd.run when passing tuples as cmd bsc1182740 - Allow extrafilerefs as sanitized kwargs for SSH client - Fix errors with virt.update - Fix for multiple for security issues CVE-2020-28243 CVE-2020-28972 CVE-2020-35662...

SUSE SLES12 Security Update : ImageMagick (SUSE-SU-2021:0600-1)

This update for ImageMagick fixes the following issues : CVE-2021-20243 bsc1182336: Division by zero in GetResizeFilterWeight in MagickCore/resize.c CVE-2021-20244 bsc1182325: Division by zero in ImplodeImage in MagickCore/visual-effects.c CVE-2021-20246 bsc1182337: Division by zero in...

SUSE SLED15 / SLES15 Security Update : python3 (SUSE-SU-2021:0529-1)

This update for python3 fixes the following issues : CVE-2021-3177: Fixed buffer overflow in PyCArgrepr in ctypes/callproc.c, which may lead to remote code execution bsc1181126. Provide the newest setuptools wheel bsc1176262, CVE-2019-20916 in their correct form bsc1180686. Note that Tenable...

SUSE SLED15 / SLES15 Security Update : cups (SUSE-SU-2021:0285-1)

This update for cups fixes the following issues : CVE-2020-10001: Fixed an out-of-bounds read in the ippReadIO function bsc1180520. CVE-2019-8842: Fixed an out-of-bounds read in an extension field bsc1170671. Note that Tenable Network Security has extracted the preceding description block directl...