SLES 15

🟠 High   ⏱ 15–60 min  Last verified: 23 February 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:14177 (see also SUSE bugzilla) Related CVEs: CVE-2025-48976 Upstream summary: Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects Apache Commons […]

🔴 Critical   ⏱ 15–90 min  Last verified: 23 February 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:2918-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-33193 CVE-2021-44790 CVE-2021-42013 CVE-2010-0425 CVE-2025-49630 CVE-2025-49812 CVE-2025-23048 CVE-2023-45802  +12 more Upstream summary: A crafted method sent through HTTP/2 will bypass validation and be forwarded by […]

🟠 High   ⏱ 15–60 min  Last verified: 22 February 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1058-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-1753 CVE-2021-20206 CVE-2019-18466 Upstream summary: A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host […]

🔴 Critical   ⏱ 15–90 min  Last verified: 22 February 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:19237 (see also SUSE bugzilla) Related CVEs: CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 CVE-2025-49844 CVE-2016-8339 CVE-2018-11218 CVE-2018-11219 CVE-2025-32023  +12 more Upstream summary: Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 February 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:02037-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-38526 Upstream summary: pdoc provides API Documentation for Python Projects. Documentation generated with `pdoc –math` linked to JavaScript files from polyfill[.]io. The polyfill[.]io CDN has […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 February 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:02785-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-48924 Upstream summary: Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 […]

🔴 Critical   ⏱ 15–90 min  Last verified: 18 February 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:03193-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-40929 Upstream summary: Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or […]

🟠 High   ⏱ 15–60 min  Last verified: 10 February 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:2408-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-6349 CVE-2024-5197 CVE-2023-5217 CVE-2019-2126 CVE-2016-1621 CVE-2016-2464 CVE-2017-0641 CVE-2017-13194  +5 more Upstream summary: A heap overflow vulnerability exists in libvpx – Encoding a frame that has […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 February 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0439-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-65105 CVE-2025-8556 Upstream summary: Apptainer is an open source container platform. In Apptainer versions less than 1.4.5, a container can disable two of the forms […]

🟠 High   ⏱ 15–60 min  Last verified: 10 February 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:4212-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-22038 CVE-2010-4226 CVE-2017-14804 Upstream summary: Various problems in obs-scm-bridge allows attackers that create specially crafted git repositories to leak information of cause denial of service. […]