SLES 15

🟡 Medium   ⏱ 10–30 min  Last verified: 22 July 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:3942-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-28885 CVE-2024-31074 CVE-2024-33617 CVE-2023-22313 Upstream summary: Observable discrepancy in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 July 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:4054-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-28168 Upstream summary: Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. […]

🔴 Critical   ⏱ 15–90 min  Last verified: 13 July 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:2401-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-9855 CVE-2024-5261 CVE-2024-3044 CVE-2023-6185 CVE-2023-6186 CVE-2022-26305 CVE-2019-9852 CVE-2019-9854  +12 more Upstream summary: LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which […]

🔴 Critical   ⏱ 15–90 min  Last verified: 12 July 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2019-18604 CVE-2023-32700 CVE-2016-10243 CVE-2018-17407 CVE-2020-8016 CVE-2020-8017 CVE-2023-46048 CVE-2023-46051 Upstream summary: In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and […]

🟠 High   ⏱ 15–60 min  Last verified: 11 July 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2025:14858-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-24439 CVE-2023-40590 CVE-2023-40267 CVE-2023-41040 Upstream summary: All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 July 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:3878-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-47889 Upstream summary: Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 July 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:4439-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-38252 CVE-2023-38253 CVE-2022-38223 CVE-2010-2074 CVE-2012-4929 CVE-2016-9434 CVE-2016-9435 CVE-2016-9436  +12 more Upstream summary: An out-of-bounds read flaw was found in w3m, in the Strnew_size function in […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 June 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:0611-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-24056 Upstream summary: In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconf_tuple_parse. For example, a .pc file […]

🟠 High   ⏱ 15–60 min  Last verified: 28 June 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:4152-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-53849 CVE-2023-0341 Upstream summary: editorconfig-core-c is theEditorConfig core library written in C (for use by plugins supporting EditorConfig parsing). In affected versions several overflows may […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 June 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:4496-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-1183 Upstream summary: A flaw was found in the Libreoffice package. An attacker can craft an odb containing a "database/script" file with a SCRIPT command […]