SLES

🟠 High   ⏱ 15–60 min  Last verified: 18 May 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:1021-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-1304 CVE-2019-5188 CVE-2015-0247 CVE-2015-1572 CVE-2019-5094 Upstream summary: An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly […]

🟠 High   ⏱ 15–60 min  Last verified: 7 May 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:1657-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-23514 CVE-2022-23516 CVE-2022-23515 CVE-2019-15587 Upstream summary: Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah […]

🟡 Medium   ⏱ 10–30 min  Last verified: 7 May 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:0076-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-40899 Upstream summary: An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie […]

🟡 Medium   ⏱ 10–30 min  Last verified: 7 May 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:169-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-40897 Upstream summary: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 May 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:1860-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3782 Upstream summary: An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The […]

🟠 High   ⏱ 15–60 min  Last verified: 4 May 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:14759-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-25321 Upstream summary: A UNIX Symbolic Link (Symlink) Following vulnerability in arpwatch of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud […]

🟡 Medium   ⏱ 10–30 min  Last verified: 3 May 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:1101-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-23645 CVE-2020-28407 Upstream summary: swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions prior to 0.5.3, 0.6.2, and 0.7.1 […]

🟠 High   ⏱ 15–60 min  Last verified: 29 April 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:3534-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-23518 CVE-2022-23519 CVE-2022-23517 CVE-2022-23520 CVE-2022-32209 Upstream summary: rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Versions >= 1.0.3, < 1.4.4 are vulnerable to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 28 April 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:2897-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-30187 Upstream summary: Unknown. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution […]

🟠 High   ⏱ 15–60 min  Last verified: 26 April 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2015:0611-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-0240 CVE-2022-2255 Upstream summary: The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid […]