{"id":"SUSE-SU-2020:3125-1","summary":"Security update for sane-backends","details":"This update for sane-backends fixes the following issues:\n\n- sane-backends version upgrade to 1.0.31:\n  * sane-backends version upgrade to 1.0.30\n    fixes memory corruption bugs CVE-2020-12861, CVE-2020-12862,\n    CVE-2020-12863, CVE-2020-12864, CVE-2020-12865,\n    CVE-2020-12866, CVE-2020-12867 (bsc#1172524)\n  * sane-backends version upgrade to 1.0.31\n    to further improve hardware enablement for scanner devices\n    (jsc#SLE-15561 and jsc#SLE-15560 with jsc#ECO-2418)\n  * The new escl backend cannot be provided for SLE12 because\n    it requires more additional software (avahi-client, libcurl,\n    and libpoppler-glib-devel) where in particular for libcurl\n    the one that is in SLE12 (via libcurl-devel-7.37.0) is likely\n    too old because with that building the escl backend fails with\n    'escl/escl.c:1267:34: error: 'CURLOPT_UNIX_SOCKET_PATH'\n    undeclared curl_easy_setopt(handle, CURLOPT_UNIX_SOCKET_PATH'\n","modified":"2026-03-11T07:15:37.176561Z","published":"2020-11-03T09:15:59Z","related":["CVE-2017-6318","CVE-2020-12861","CVE-2020-12862","CVE-2020-12863","CVE-2020-12864","CVE-2020-12865","CVE-2020-12866","CVE-2020-12867"],"upstream":["CVE-2017-6318","CVE-2020-12861","CVE-2020-12862","CVE-2020-12863","CVE-2020-12864","CVE-2020-12865","CVE-2020-12866","CVE-2020-12867"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203125-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1172524"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-6318"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-12861"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-12862"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-12863"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-12864"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-12865"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-12866"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-12867"}],"affected":[{"package":{"name":"sane-backends","ecosystem":"SUSE:HPE Helion OpenStack 8","purl":"pkg:rpm/suse/sane-backends&distro=HPE%20Helion%20OpenStack%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-4.3.1"}]}],"ecosystem_specific":{"binaries":[{"sane-backends":"1.0.31-4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3125-1.json"}},{"package":{"name":"sane-backends","ecosystem":"SUSE:OpenStack Cloud 7","purl":"pkg:rpm/suse/sane-backends&distro=SUSE%20OpenStack%20Cloud%207"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-4.3.1"}]}],"ecosystem_specific":{"binaries":[{"sane-backends":"1.0.31-4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3125-1.json"}},{"package":{"name":"sane-backends","ecosystem":"SUSE:OpenStack Cloud 8","purl":"pkg:rpm/suse/sane-backends&distro=SUSE%20OpenStack%20Cloud%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-4.3.1"}]}],"ecosystem_specific":{"binaries":[{"sane-backends":"1.0.31-4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3125-1.json"}},{"package":{"name":"sane-backends","ecosystem":"SUSE:OpenStack Cloud 9","purl":"pkg:rpm/suse/sane-backends&distro=SUSE%20OpenStack%20Cloud%209"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-4.3.1"}]}],"ecosystem_specific":{"binaries":[{"sane-backends":"1.0.31-4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3125-1.json"}},{"package":{"name":"sane-backends","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","purl":"pkg:rpm/suse/sane-backends&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-4.3.1"}]}],"ecosystem_specific":{"binaries":[{"sane-backends":"1.0.31-4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3125-1.json"}},{"package":{"name":"sane-backends","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","purl":"pkg:rpm/suse/sane-backends&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-4.3.1"}]}],"ecosystem_specific":{"binaries":[{"sane-backends":"1.0.31-4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3125-1.json"}},{"package":{"name":"sane-backends","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","purl":"pkg:rpm/suse/sane-backends&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-4.3.1"}]}],"ecosystem_specific":{"binaries":[{"sane-backends":"1.0.31-4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3125-1.json"}},{"package":{"name":"sane-backends","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","purl":"pkg:rpm/suse/sane-backends&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-4.3.1"}]}],"ecosystem_specific":{"binaries":[{"sane-backends":"1.0.31-4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3125-1.json"}},{"package":{"name":"sane-backends","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","purl":"pkg:rpm/suse/sane-backends&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-4.3.1"}]}],"ecosystem_specific":{"binaries":[{"sane-backends":"1.0.31-4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3125-1.json"}},{"package":{"name":"sane-backends","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","purl":"pkg:rpm/suse/sane-backends&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-4.3.1"}]}],"ecosystem_specific":{"binaries":[{"sane-backends-devel":"1.0.31-4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3125-1.json"}},{"package":{"name":"sane-backends","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","purl":"pkg:rpm/suse/sane-backends&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-4.3.1"}]}],"ecosystem_specific":{"binaries":[{"sane-backends":"1.0.31-4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3125-1.json"}},{"package":{"name":"sane-backends","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","purl":"pkg:rpm/suse/sane-backends&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-4.3.1"}]}],"ecosystem_specific":{"binaries":[{"sane-backends":"1.0.31-4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3125-1.json"}},{"package":{"name":"sane-backends","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","purl":"pkg:rpm/suse/sane-backends&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-4.3.1"}]}],"ecosystem_specific":{"binaries":[{"sane-backends":"1.0.31-4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3125-1.json"}},{"package":{"name":"sane-backends","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","purl":"pkg:rpm/suse/sane-backends&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-4.3.1"}]}],"ecosystem_specific":{"binaries":[{"sane-backends":"1.0.31-4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3125-1.json"}},{"package":{"name":"sane-backends","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","purl":"pkg:rpm/suse/sane-backends&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-4.3.1"}]}],"ecosystem_specific":{"binaries":[{"sane-backends":"1.0.31-4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3125-1.json"}},{"package":{"name":"sane-backends","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","purl":"pkg:rpm/suse/sane-backends&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-4.3.1"}]}],"ecosystem_specific":{"binaries":[{"sane-backends":"1.0.31-4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3125-1.json"}},{"package":{"name":"sane-backends","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","purl":"pkg:rpm/suse/sane-backends&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-4.3.1"}]}],"ecosystem_specific":{"binaries":[{"sane-backends":"1.0.31-4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3125-1.json"}},{"package":{"name":"sane-backends","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","purl":"pkg:rpm/suse/sane-backends&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-4.3.1"}]}],"ecosystem_specific":{"binaries":[{"sane-backends-autoconfig":"1.0.31-4.3.1","sane-backends-32bit":"1.0.31-4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3125-1.json"}},{"package":{"name":"sane-backends","ecosystem":"SUSE:Enterprise Storage 5","purl":"pkg:rpm/suse/sane-backends&distro=SUSE%20Enterprise%20Storage%205"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-4.3.1"}]}],"ecosystem_specific":{"binaries":[{"sane-backends":"1.0.31-4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3125-1.json"}}],"schema_version":"1.7.5"}