SLES

🔴 Critical   ⏱ 15–90 min  Last verified: 31 December 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:2790-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-22930 CVE-2019-9514 CVE-2019-9515 CVE-2019-9518 CVE-2020-11080 CVE-2020-7774 CVE-2020-8252 CVE-2020-8265  +12 more Upstream summary: Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free […]

🟠 High   ⏱ 15–60 min  Last verified: 28 December 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:314-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-33430 CVE-2021-41495 CVE-2017-12852 CVE-2021-41496 CVE-2019-6446 Upstream summary: A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of […]

🟠 High   ⏱ 15–60 min  Last verified: 28 December 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:1294-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-36327 CVE-2021-43809 CVE-2019-3881 Upstream summary: Bundler 1.16.0 through 2.2.9 and 2.2.11 through 2.2.16 sometimes chooses a dependency source based on the highest gem version number, […]

🟠 High   ⏱ 15–60 min  Last verified: 14 December 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:4193-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-45463 CVE-2018-10113 CVE-2012-4433 Upstream summary: load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or […]

🟠 High   ⏱ 15–60 min  Last verified: 10 December 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:0186-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-10536 CVE-2018-10537 CVE-2018-6767 CVE-2020-35738 CVE-2021-44269 CVE-2018-10538 CVE-2018-10539 CVE-2018-10540  +7 more Upstream summary: An issue was discovered in WavPack 5.1.0 and earlier. The WAV parser component […]

🟠 High   ⏱ 15–60 min  Last verified: 9 December 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:254-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3580 CVE-2021-20305 CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 CVE-2016-6489 CVE-2018-16869 Upstream summary: A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An […]

🟠 High   ⏱ 15–60 min  Last verified: 26 November 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:2443-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3570 Upstream summary: A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 November 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:2126-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-44215 CVE-2021-44216 Upstream summary: Northern.tech CFEngine Enterprise 3.15.4 before 3.15.5 has Insecure Permissions that may allow unauthorized local users to have an unspecified impact. Table […]

🟠 High   ⏱ 15–60 min  Last verified: 19 November 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2013:0709-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-1762 CVE-2021-20230 CVE-2015-3644 CVE-2011-2940 CVE-2014-0016 Upstream summary: stunnel 4.21 through 4.54, when CONNECT protocol negotiation and NTLM authentication are enabled, does not correctly perform integer […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 November 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:1860-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3782 Upstream summary: An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The […]