SLES 15

🟠 High   ⏱ 15–60 min  Last verified: 12 November 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:3876-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-49768 CVE-2022-31015 Upstream summary: Waitress is a Web Server Gateway Interface server for Python 2 and 3. A remote client may send a request that […]

🔴 Critical   ⏱ 15–90 min  Last verified: 5 November 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:9144 (see also SUSE bugzilla) Related CVEs: CVE-2024-4558 CVE-2022-0108 CVE-2021-33516 CVE-2017-1000121 CVE-2018-4437 CVE-2018-4438 CVE-2018-4441 CVE-2018-4442  +12 more Upstream summary: Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a […]

🟠 High   ⏱ 15–60 min  Last verified: 27 October 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:2292-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-25749 CVE-2021-25743 CVE-2024-3177 CVE-2024-0793 CVE-2022-3162 CVE-2022-3294 CVE-2023-2431 Upstream summary: Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true. […]

🟠 High   ⏱ 15–60 min  Last verified: 27 October 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:3745-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-7254 Upstream summary: Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted […]

🟠 High   ⏱ 15–60 min  Last verified: 19 October 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0135-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-23301 Upstream summary: Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. This allows local attackers to gain access to system secrets […]

🔴 Critical   ⏱ 15–90 min  Last verified: 19 October 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-FU-2022:0444-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-15801 CVE-2022-42919 CVE-2021-29921 CVE-2020-15523 CVE-2024-8088 Upstream summary: In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 October 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1605-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-29040 CVE-2023-22745 CVE-2020-24455 Upstream summary: This repository hosts source code implementing the Trusted Computing Group's (TCG) TPM2 Software Stack (TSS). The JSON Quote Info returned […]

🟠 High   ⏱ 15–60 min  Last verified: 5 October 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:3533-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-3019 CVE-2019-3695 CVE-2019-3696 CVE-2023-6917 CVE-2024-45769 CVE-2024-45770 CVE-2012-3418 CVE-2012-3419  +4 more Upstream summary: A flaw was found in PCP. The default pmproxy configuration exposes the Redis […]

🔴 Critical   ⏱ 15–90 min  Last verified: 4 October 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2020-12267 CVE-2024-39936 CVE-2023-32763 CVE-2023-24607 CVE-2022-23853 CVE-2022-25255 CVE-2020-24741 CVE-2020-0569  +12 more Upstream summary: setMarkdown in Qt before 5.14.2 has a use-after-free related to QTextMarkdownImporter::insertBlock. Table of […]