SLES 15

🟡 Medium   ⏱ 5–30 min  Last verified: 2 January 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:0226-1 Related CVEs: CVE-2024-2365 Upstream summary: A vulnerability classified as problematic was found in Musicshelf 1.0/1.1 on Android. Affected by this vulnerability is an unknown functionality of the file io\fabric\sdk\android\services\network\PinningTrustManager.java of the […]

🟠 High   ⏱ 15–60 min  Last verified: 28 December 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1301-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-27983 CVE-2024-22019 CVE-2023-30581 CVE-2021-37701 CVE-2021-37712 CVE-2021-37713 CVE-2021-39134 CVE-2021-39135  +12 more Upstream summary: An attacker can make the Node.js HTTP/2 server completely unavailable by sending a […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 December 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:9114 (see also SUSE bugzilla) Related CVEs: CVE-2024-36472 CVE-2023-43090 CVE-2010-4000 CVE-2017-8288 CVE-2019-3820 CVE-2020-17489 Upstream summary: In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation) based on […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 December 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1365-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-29131 CVE-2024-29133 Upstream summary: Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1. Users are recommended to upgrade […]

🟠 High   ⏱ 15–60 min  Last verified: 21 December 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:0005-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-37305 CVE-2024-54137 CVE-2024-36405 Upstream summary: oqs-provider is a provider for the OpenSSL 3 cryptography library that adds support for post-quantum cryptography in TLS, X.509, and […]

🟠 High   ⏱ 15–60 min  Last verified: 15 December 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1199-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-31082 CVE-2022-2319 CVE-2022-2320 CVE-2018-14665 CVE-2020-14345 CVE-2020-14346 CVE-2020-14360 CVE-2020-14361  +12 more Upstream summary: A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap() function. […]

🟠 High   ⏱ 15–60 min  Last verified: 12 December 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1534-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-32487 CVE-2022-48624 CVE-2022-46663 CVE-2014-9488 Upstream summary: less through 653 allows OS command execution via a newline character in the name of a file, because quoting […]

🟠 High   ⏱ 15–60 min  Last verified: 10 December 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:3426-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-15865 CVE-2024-44070 CVE-2024-34088 CVE-2024-31948 CVE-2024-31950 CVE-2024-31951 CVE-2023-47234 CVE-2023-47235  +12 more Upstream summary: bgpd in FRRouting (FRR) before 2.0.2 and 3.x before 3.0.2, as used in […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 December 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2016-10075 CVE-2024-34062 Upstream summary: The tqdm._version module in tqdm versions 4.4.1 and 4.10 allows local users to execute arbitrary code via a crafted repo with […]