🟠 High ⏱ 15–60 min Last verified: 3 February 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2978-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-1013 Upstream summary: An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 […]
🟠 High ⏱ 15–60 min Last verified: 2 February 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:0800-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322 +4 more Upstream summary: When following an HTTP redirect to a domain which is not a subdomain […]
🔴 Critical ⏱ 15–90 min Last verified: 31 January 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:0453-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-20032 CVE-2010-1205 CVE-2025-20260 CVE-2024-20505 CVE-2024-20380 CVE-2023-40477 CVE-2023-20197 CVE-2022-20771 +12 more Upstream summary: On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was […]
🟡 Medium ⏱ 10–30 min Last verified: 29 January 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:02785-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-48924 Upstream summary: Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 […]
🟠 High ⏱ 15–60 min Last verified: 28 January 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:4330-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-64324 CVE-2023-26484 CVE-2022-1798 CVE-2025-64432 CVE-2025-64433 CVE-2025-64434 CVE-2025-64435 CVE-2024-33394 +1 more Upstream summary: KubeVirt is a virtual machine management add-on for Kubernetes. The `hostDisk` feature in […]
🔴 Critical ⏱ 15–90 min Last verified: 27 January 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:3044-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3781 CVE-2025-27832 CVE-2025-27835 CVE-2025-27836 CVE-2024-46951 CVE-2024-46953 CVE-2024-46956 CVE-2020-16305 +12 more Upstream summary: A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in […]
🟠 High ⏱ 15–60 min Last verified: 26 January 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:3690-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-22217 CVE-2024-25629 CVE-2022-4904 Upstream summary: Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c. Table of contents Symptom & Impact […]
🔴 Critical ⏱ 15–90 min Last verified: 25 January 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:2192-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-30123 CVE-2025-61919 CVE-2025-27610 CVE-2024-25126 CVE-2024-26141 CVE-2025-61780 CVE-2025-25184 CVE-2025-27111 +9 more Upstream summary: A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could […]
🟠 High ⏱ 15–60 min Last verified: 24 January 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:3957-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-40175 CVE-2022-24790 CVE-2021-29509 CVE-2024-21647 CVE-2024-45614 CVE-2022-23634 CVE-2021-41136 Upstream summary: Puma is a Ruby/Rack web server built for parallelism. Prior to versions 6.3.1 and 5.6.7, puma […]
🟡 Medium ⏱ 10–30 min Last verified: 24 January 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:01500-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-31335 Upstream summary: The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation (when using SAML bindings that rely on […]
