SLES 15

🟡 Medium   ⏱ 10–30 min  Last verified: 18 April 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:03051-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-58068 Upstream summary: Eventlet is a concurrent networking library for Python. Prior to version 0.40.3, the Eventlet WSGI parser is vulnerable to HTTP Request Smuggling […]

🟠 High   ⏱ 15–60 min  Last verified: 15 April 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:15900 (see also SUSE bugzilla) Related CVEs: CVE-2025-9566 CVE-2025-6032 CVE-2024-11218 CVE-2022-1227 CVE-2022-21698 CVE-2025-47914 CVE-2024-9676 CVE-2024-9675  +7 more Upstream summary: There's a vulnerability in podman where an attacker may use the kube play […]

🟡 Medium   ⏱ 10–30 min  Last verified: 14 April 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:2873-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-33861 CVE-2024-30161 Upstream summary: Unknown. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix […]

🟠 High   ⏱ 15–60 min  Last verified: 12 April 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:7524 (see also SUSE bugzilla) Related CVEs: CVE-2025-31115 CVE-2022-1271 Upstream summary: XZ Utils provide a general-purpose data-compression library plus command-line tools. In XZ Utils 5.3.3alpha to 5.8.0, the multithreaded .xz decoder in […]

🟠 High   ⏱ 15–60 min  Last verified: 10 April 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:03062-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-23277 CVE-2025-23278 CVE-2025-23279 CVE-2025-23283 CVE-2024-0131 CVE-2024-0147 CVE-2024-0149 CVE-2024-0150  +5 more Upstream summary: NVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel […]

🟡 Medium   ⏱ 10–30 min  Last verified: 8 April 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:10353 (see also SUSE bugzilla) Related CVEs: CVE-2024-54661 CVE-2013-3571 CVE-2014-0019 Upstream summary: readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

🔴 Critical   ⏱ 15–90 min  Last verified: 8 April 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:0960-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-6438 CVE-2022-29502 CVE-2022-29500 CVE-2022-29501 CVE-2016-10030 CVE-2024-48936 CVE-2021-43337 CVE-2022-31251  +7 more Upstream summary: SchedMD Slurm before 17.11.13 and 18.x before 18.08.5 mishandles 32-bit systems. Table of […]

🟠 High   ⏱ 15–60 min  Last verified: 3 April 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0770-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-0074 CVE-2024-0075 CVE-2022-42265 CVE-2023-31022 Upstream summary: NVIDIA GPU Display Driver for Linux contains a vulnerability where an attacker may access a memory location after the […]

🔴 Critical   ⏱ 15–90 min  Last verified: 2 April 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2023-46850 CVE-2025-13086 CVE-2022-0547 CVE-2017-7521 CVE-2017-7522 CVE-2025-2704 CVE-2024-5594 CVE-2024-28882  +7 more Upstream summary: Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 April 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1744-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-71176 Upstream summary: pytest through 9.0.2 on UNIX relies on directories with the /tmp/pytest-of-{user} name pattern, which allows local users to cause a denial of […]