SLES

🟡 Medium   ⏱ 10–30 min  Last verified: 16 February 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:2872-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-31081 Upstream summary: HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially […]

🔴 Critical   ⏱ 15–90 min  Last verified: 15 February 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:0088-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-35458 CVE-2021-25314 Upstream summary: An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code injection issue via the hawk_remember_me_id […]

🟡 Medium   ⏱ 10–30 min  Last verified: 12 February 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:541-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-43618 Upstream summary: GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to […]

🟠 High   ⏱ 15–60 min  Last verified: 11 February 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:0484-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-3560 Upstream summary: A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit […]

🟠 High   ⏱ 15–60 min  Last verified: 7 February 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:1007-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-24921 CVE-2022-23772 CVE-2022-23806 CVE-2021-39293 CVE-2021-41771 CVE-2021-41772 CVE-2021-44716 CVE-2022-23773  +3 more Upstream summary: regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 February 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:1277-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3624 CVE-2018-19566 CVE-2018-19568 CVE-2017-13735 CVE-2017-14608 CVE-2018-19655 CVE-2018-5805 CVE-2018-5806  +3 more Upstream summary: There is an integer overflow vulnerability in dcraw. When the victim runs dcraw […]

🟠 High   ⏱ 15–60 min  Last verified: 4 February 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3724-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-41550 CVE-2016-10324 CVE-2016-10325 CVE-2016-10326 CVE-2017-7853 Upstream summary: GNU oSIP v5.3.0 was discovered to contain an integer overflow via the component osip_body_parse_header. Table of contents Symptom […]

🟠 High   ⏱ 15–60 min  Last verified: 3 February 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:3814-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-27291 CVE-2021-20270 Upstream summary: In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the […]

🟠 High   ⏱ 15–60 min  Last verified: 31 January 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2025:14637-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-34749 CVE-2017-15612 CVE-2017-16876 Upstream summary: In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount […]

🟠 High   ⏱ 15–60 min  Last verified: 29 January 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-IU-2021:537-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-25217 CVE-2018-5732 CVE-2019-6470 CVE-2022-2928 CVE-2022-2929 CVE-2009-1892 CVE-2010-2156 CVE-2010-3611  +12 more Upstream summary: In ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches […]