🔴 Critical ⏱ 15–90 min Last verified: 12 April 2024 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:0769-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-1597 CVE-2022-31197 CVE-2022-41946 CVE-2020-13692 Upstream summary: pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE. Note this is not the default. […]
🔴 Critical ⏱ 15–90 min Last verified: 12 April 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2020:3330-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-12321 CVE-2023-31315 CVE-2021-26345 CVE-2021-46766 CVE-2021-46774 CVE-2022-23820 CVE-2022-23830 CVE-2023-20519 +12 more Upstream summary: Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may […]
🟠 High ⏱ 15–60 min Last verified: 10 April 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2024:6757 (see also SUSE bugzilla) Related CVEs: CVE-2024-7383 CVE-2022-0485 CVE-2023-5215 CVE-2023-5871 CVE-2021-20286 Upstream summary: A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when […]
🟠 High ⏱ 15–60 min Last verified: 10 April 2024 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:4230-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-48795 CVE-2020-22218 CVE-2019-17498 CVE-2015-1782 CVE-2016-0787 CVE-2019-3855 CVE-2019-3856 CVE-2019-3857 +6 more Upstream summary: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 […]
🟠 High ⏱ 15–60 min Last verified: 8 April 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2584-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-24575 CVE-2023-22742 CVE-2018-15501 CVE-2016-10128 CVE-2016-10129 CVE-2016-10130 CVE-2016-8568 CVE-2016-8569 +6 more Upstream summary: libgit2 is a portable C implementation of the Git core methods provided as […]
🟡 Medium ⏱ 10–30 min Last verified: 3 April 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2029-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-5206 Upstream summary: A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in […]
🟠 High ⏱ 15–60 min Last verified: 3 April 2024 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory RHSA-2024:9136 (see also SUSE bugzilla) Related CVEs: CVE-2024-7409 CVE-2021-3750 CVE-2023-3354 CVE-2023-3180 CVE-2023-2861 CVE-2023-1544 CVE-2021-3929 CVE-2021-4206 +12 more Upstream summary: A flaw was found in the QEMU NBD Server. This vulnerability allows a […]
🟡 Medium ⏱ 10–30 min Last verified: 2 April 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:1135-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-25629 CVE-2022-4904 CVE-2016-5180 CVE-2017-1000381 Upstream summary: c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as […]
🟠 High ⏱ 15–60 min Last verified: 1 April 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2024:8834 (see also SUSE bugzilla) Related CVEs: CVE-2023-41419 Upstream summary: An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component. […]
🟡 Medium ⏱ 10–30 min Last verified: 29 March 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:4060-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-42811 CVE-2023-22895 Upstream summary: aes-gcm is a pure Rust implementation of the AES-GCM. Starting in version 0.10.0 and prior to version 0.10.3, in the AES […]
