SLES 15

🟡 Medium   ⏱ 10–30 min  Last verified: 30 March 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0368-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-69277 CVE-2025-15444 Upstream summary: libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an […]

🟠 High   ⏱ 15–60 min  Last verified: 30 March 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:8837 (see also SUSE bugzilla) Related CVEs: CVE-2025-47947 CVE-2025-48866 CVE-2023-24021 CVE-2022-48279 CVE-2025-54571 CVE-2009-5031 CVE-2012-4528 CVE-2013-1915  +2 more Upstream summary: ModSecurity is an open source, cross platform web application firewall (WAF) engine for […]

🟠 High   ⏱ 15–60 min  Last verified: 27 March 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory ESSA-2025:2834 (see also SUSE bugzilla) Related CVEs: CVE-2025-27363 CVE-2020-15999 CVE-2023-2004 CVE-2022-27404 CVE-2022-27405 CVE-2022-27406 CVE-2014-2240 CVE-2014-9656  +12 more Upstream summary: An out of bounds write exists in FreeType versions 2.13.0 and below (newer […]

🟠 High   ⏱ 15–60 min  Last verified: 21 March 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:01816-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-28285 CVE-2016-9939 CVE-2015-2141 Upstream summary: A Fault Injection vulnerability in the SymmetricDecrypt function in cryptopp/elgamal.h of Cryptopp Crypto++ 8.9, allows an attacker to co-reside in […]

🟠 High   ⏱ 15–60 min  Last verified: 17 March 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:21042-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-25621 CVE-2025-64329 CVE-2024-40635 CVE-2023-25153 CVE-2022-23471 Upstream summary: containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 […]

🟡 Medium   ⏱ 10–30 min  Last verified: 15 March 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:0012 (see also SUSE bugzilla) Related CVEs: CVE-2024-35195 Upstream summary: Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with […]

🟠 High   ⏱ 15–60 min  Last verified: 12 March 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:03028-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-50817 Upstream summary: A vulnerability in the Python-Future 1.0.0 module allows for arbitrary code execution via the unintended import of a file named test.py. When […]

🟡 Medium   ⏱ 10–30 min  Last verified: 11 March 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0963-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-1580 CVE-2023-32570 Upstream summary: An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 11 March 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-202410:15282-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-5569 Upstream summary: A Denial of Service (DoS) vulnerability exists in the jaraco/zipp library, affecting all versions prior to 3.19.1. The vulnerability is triggered when […]

🟠 High   ⏱ 15–60 min  Last verified: 11 March 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1396-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-31744 CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-8654 CVE-2016-9262 CVE-2016-9560 CVE-2020-27828  +12 more Upstream summary: In Jasper 4.2.2, the jpc_streamlist_remove function in src/libjasper/jpc/jpc_dec.c:2407 has an assertion failure vulnerability, […]