SLES

🔴 Critical   ⏱ 15–90 min  Last verified: 17 November 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2019-10672 CVE-2019-16092 CVE-2019-16093 CVE-2021-3756 CVE-2019-16091 CVE-2019-16094 CVE-2019-16095 CVE-2019-20063  +7 more Upstream summary: treeRead in hdf/btree.c in libmysofa before 0.7 does not properly validate multiplications and […]

🟡 Medium   ⏱ 10–30 min  Last verified: 7 November 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:236-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-11078 CVE-2021-21240 Upstream summary: In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send […]

🟠 High   ⏱ 15–60 min  Last verified: 2 November 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:1943-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3567 Upstream summary: A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to bypass screen-locking […]

🟡 Medium   ⏱ 10–30 min  Last verified: 29 October 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3667-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-32000 Upstream summary: A UNIX Symbolic Link (Symlink) Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterprise Server 12 SP3, SUSE Linux […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 October 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:712-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-11979 CVE-2021-42550 CVE-2021-36373 CVE-2021-36374 CVE-2013-1571 CVE-2018-10886 CVE-2020-1945 Upstream summary: As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so […]

🟠 High   ⏱ 15–60 min  Last verified: 21 October 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:0157-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-28021 CVE-2021-42716 CVE-2021-42715 Upstream summary: Buffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a crafted JPEG file. Table of contents Symptom […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 October 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:712-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-11979 CVE-2020-1945 CVE-2021-36373 CVE-2021-36374 CVE-2013-1571 CVE-2018-10886 Upstream summary: As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 October 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:3214-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-40812 CVE-2016-10166 CVE-2016-10168 CVE-2016-5116 CVE-2016-5766 CVE-2016-6128 CVE-2016-6132 CVE-2016-6207  +12 more Upstream summary: The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because […]

🟠 High   ⏱ 15–60 min  Last verified: 10 October 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:0145-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-45417 Upstream summary: AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), […]