SLES

🟠 High   ⏱ 15–60 min  Last verified: 29 September 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3245-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-28902 CVE-2021-28903 CVE-2021-28904 CVE-2021-28906 CVE-2021-28905 Upstream summary: In function read_yin_container() in libyang <= v1.0.225, it doesn't check whether the value of retval->ext[r] is NULL. In […]

🟠 High   ⏱ 15–60 min  Last verified: 28 September 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:14846-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-20298 CVE-2021-3479 CVE-2021-3605 CVE-2020-15304 CVE-2020-15305 CVE-2020-15306 CVE-2020-16587 CVE-2020-16588  +12 more Upstream summary: A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who […]

🔴 Critical   ⏱ 15–90 min  Last verified: 19 September 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:2790-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-22930 CVE-2020-8174 CVE-2020-7774 CVE-2021-27290 CVE-2021-32803 CVE-2021-32804 CVE-2019-15604 CVE-2019-15605  +12 more Upstream summary: Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free […]

🟠 High   ⏱ 15–60 min  Last verified: 18 September 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:1218-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-33657 CVE-2020-14409 CVE-2020-14410 CVE-2019-13616 CVE-2019-7572 CVE-2019-7573 CVE-2019-7574 CVE-2019-7575  +7 more Upstream summary: There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) […]

🟠 High   ⏱ 15–60 min  Last verified: 17 September 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:2612-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-35515 CVE-2021-35516 CVE-2021-35517 CVE-2021-36090 CVE-2019-12402 Upstream summary: When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry […]

🟠 High   ⏱ 15–60 min  Last verified: 6 September 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:599-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-42771 Upstream summary: Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 August 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:2149-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-20180 CVE-2021-20191 CVE-2021-20228 CVE-2021-3447 CVE-2021-3583 CVE-2021-3620 Upstream summary: A flaw was found in ansible module where credentials are disclosed in the console log by default […]

🟠 High   ⏱ 15–60 min  Last verified: 18 August 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:3318-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-11797 CVE-2021-27807 CVE-2021-27906 CVE-2016-2175 CVE-2018-8036 Upstream summary: In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an […]

🟡 Medium   ⏱ 10–30 min  Last verified: 14 August 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:1760-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3504 CVE-2021-3622 CVE-2014-9273 Upstream summary: A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 July 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3667-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-32000 Upstream summary: A UNIX Symbolic Link (Symlink) Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterprise Server 12 SP3, SUSE Linux […]