Vulnerabilities fixed in SUSE kernel

Vulnerabilities have been fixed in SUSE kernel. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Denial-of-Service DoS. Access to system data Increased user privileges -= SUSE =- SUSE has made updates available to fix the vulnerabili...

OPENSUSE-SU-2021:1082-1 Security update for systemd

This update for systemd fixes the following issues: - CVE-2021-33910: Fixed a denial of service in systemd via unitnamepathescape bsc1188063 - Skip udev rules if 'elevator=' is used bsc1184994 This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2021:1056-1 Security update for dbus-1

This update for dbus-1 fixes the following issues: - CVE-2020-35512: Fixed a use-after-free or potential undefined behaviour caused by shared UID's bsc1187105 This update was imported from the SUSE:SLE-15-SP1:Update update project...

OPENSUSE-SU-2021:0962-1 Security update for lua53

This update for lua53 fixes the following issues: Update to version 5.3.6: - CVE-2020-24371: lgc.c mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving collectgarbage bsc1175449 - CVE-2020-24370: ldebug.c allows a negation overflow and...

OPENSUSE-SU-2021:0934-1 Security update for tpm2.0-tools

This update for tpm2.0-tools fixes the following issues: - CVE-2021-3565: Fixed issue when no encrypted session with the TPM is used bsc1186490. This update was imported from the SUSE:SLE-15-SP2:Update update project...

OPENSUSE-SU-2021:0930-1 Security update for freeradius-server

This update for freeradius-server fixes the following issues: - Fixed plaintext password entries in logfiles bsc1184016. This update was imported from the SUSE:SLE-15-SP2:Update update project...

OPENSUSE-SU-2021:0918-1 Security update for ovmf

This update for ovmf fixes the following issues: - Fixed a possible buffer overflow in IScsiDxe bsc1186151 This update was imported from the SUSE:SLE-15-SP2:Update update project...

OPENSUSE-SU-2021:0904-1 Security update for go1.15

This update for go1.15 fixes the following issues: - Updated go to upstream version 1.15.12 released 2021-05-06 bsc1175132. - CVE-2021-31525: Fixed stack overflow via net/http ReadRequest bsc1185790. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2021:0900-1 Security update for xterm

This update for xterm fixes the following issues: - CVE-2021-27135: Fixed buffer-overflow when clicking on selected utf8 text. bsc1182091 This update was imported from the SUSE:SLE-15-SP2:Update update project...

Security update for go1.15 (moderate)

openSUSE Security Update: Security update for go1.15 Announcement ID: openSUSE-SU-2021:0904-1 Rating: moderate References: 1175132 1185790 Cross-References: CVE-2021-31525 CVSS scores: CVE-2021-31525 NVD : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-31525 SUSE: 6.5...

OPENSUSE-SU-2021:0892-1 Security update for libjpeg-turbo

This update for libjpeg-turbo fixes the following issues: - CVE-2020-17541: Fixed a stack-based buffer overflow in the 'transform' component bsc1186764. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2021:0886-1 Security update for libxml2

This update for libxml2 fixes the following issues: - CVE-2021-3541: Fixed exponential entity expansion attack bypasses all existing protection mechanisms. bsc1186015 This update was imported from the SUSE:SLE-15:Update update project...

SUSE: Security Advisory (SUSE-SU-2019:2043-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2021:0851-1 Security update for python-py

This update for python-py fixes the following issues: - CVE-2020-29651: Fixed regular expression denial of service in svnwc.py bsc1179805, bsc1184505. This update was imported from the SUSE:SLE-15-SP1:Update update project...

OPENSUSE-SU-2021:0846-1 Security update for umoci

This update for umoci fixes the following issues: Update to v0.4.7 bsc1184147. - CVE-2021-29136: Fixed overwriting of host files via malicious layer bsc1184147. This update was imported from the SUSE:SLE-15:Update update project...

SUSE-SU-2021:1779-1 Security update for python-httplib2

This update for python-httplib2 contains the following fixes: Security fixes included in this update: - CVE-2021-21240: Fixed a regular expression denial of service via malicious header bsc1182053. - CVE-2020-11078: Fixed an issue where an attacker could change request headers and body bsc1171998...

SUSE-SU-2021:1715-1 Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-22 fixes several issues. The following security issues were fixed: - CVE-2020-36322: Fixed an issue inside the FUSE filesystem implementation where fusedogetattr calls makebadinode in inappropriate situations, could have caused a system crash. NOTE: the...

OPENSUSE-SU-2021:0757-1 Security update for graphviz

This update for graphviz fixes the following issues: - CVE-2020-18032: Fixed possible remote code execution via buffer overflow bsc1185833. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2021:0734-1 Security update for openvpn

This update for openvpn fixes the following issues: - CVE-2020-15078: Fixed authentication bypass with deferred authentication bsc1185279. - CVE-2020-11810: Fixed race condition between allocating peer-id and initializing data channel key bsc1169925. - CVE-2018-7544: Fixed cross-protocol scriptin...

Security update for giflib (low)

openSUSE Security Update: Security update for giflib Announcement ID: openSUSE-SU-2021:0650-1 Rating: low References: 1184123 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for giflib fixes the following issues: - Enable...