🔴 Critical ⏱ 15–90 min Last verified: 16 July 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2025:23201 (see also SUSE bugzilla) Related CVEs: CVE-2025-13609 CVE-2022-1053 CVE-2021-43310 CVE-2023-38201 CVE-2023-38200 CVE-2022-31250 CVE-2022-23948 CVE-2022-23949 +4 more Upstream summary: A vulnerability has been identified in keylime where an attacker can exploit this […]
🟡 Medium ⏱ 10–30 min Last verified: 15 July 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:03077-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-58266 CVE-2022-24713 Upstream summary: The shlex crate before 1.2.1 for Rust allows unquoted and unescaped instances of the { and \xa0 characters, which may facilitate […]
🟠 High ⏱ 15–60 min Last verified: 14 July 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:0057-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-4759 CVE-2025-4949 Upstream summary: Arbitrary File Overwrite in Eclipse JGit <= 6.6.0 In Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic link present in a […]
🟠 High ⏱ 15–60 min Last verified: 14 July 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-RU-2025:20479-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-6018 CVE-2020-16125 CVE-2011-1709 CVE-2017-12164 CVE-2018-14424 CVE-2019-3825 CVE-2020-27837 CVE-2015-7496 Upstream summary: A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication […]
🟠 High ⏱ 15–60 min Last verified: 11 July 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0404-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-68670 CVE-2024-39917 CVE-2022-23477 CVE-2020-4044 CVE-2023-42822 CVE-2023-40184 CVE-2022-23478 CVE-2022-23468 +10 more Upstream summary: xrdp is an open source RDP server. xrdp before v0.10.5 contains an unauthenticated […]
🟠 High ⏱ 15–60 min Last verified: 7 July 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2018:3963-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-11759 CVE-2024-46544 CVE-2023-41081 CVE-2007-0774 CVE-2008-5519 Upstream summary: The Apache Web Server (httpd) specific code that normalised the requested path before matching it to the URI-worker […]
🔴 Critical ⏱ 15–90 min Last verified: 6 July 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory RHSA-2025:21452 (see also SUSE bugzilla) Related CVEs: CVE-2025-47151 CVE-2025-46404 CVE-2025-46705 CVE-2025-46784 CVE-2021-28091 Upstream summary: A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted […]
🟠 High ⏱ 15–60 min Last verified: 6 July 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:03520-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-57052 CVE-2023-26819 Upstream summary: cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking […]
🟠 High ⏱ 15–60 min Last verified: 5 July 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:3770-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-36474 CVE-2024-42415 CVE-2016-9888 Upstream summary: An integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File […]
🟡 Medium ⏱ 10–30 min Last verified: 3 July 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2168-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-38394 CVE-2014-7300 Upstream summary: Mismatches in interpreting USB authorization policy between GNOME Settings Daemon (GSD) through 46.0 and the Linux kernel's underlying device matching logic […]
