SLES

🟠 High   ⏱ 15–60 min  Last verified: 6 July 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:197-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-14343 CVE-2020-1747 Upstream summary: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when […]

🟠 High   ⏱ 15–60 min  Last verified: 5 July 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2014-0021 CVE-2012-4502 CVE-2012-4503 CVE-2020-14367 CVE-2016-1567 Upstream summary: Chrony before 1.29.1 has traffic amplification in cmdmon protocol Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]

🟠 High   ⏱ 15–60 min  Last verified: 30 June 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3198-1 Related CVEs: CVE-2021-32610 Upstream summary: In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193. Table of contents Symptom & Impact Environment […]

🟠 High   ⏱ 15–60 min  Last verified: 30 June 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2021:1174-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-36430 CVE-2020-26682 CVE-2020-24994 CVE-2016-7969 CVE-2016-7970 CVE-2016-7972 Upstream summary: libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) because […]

🟠 High   ⏱ 15–60 min  Last verified: 29 June 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:1903-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-17233 CVE-2018-17234 CVE-2018-17237 CVE-2020-10809 CVE-2017-17509 CVE-2018-13869 CVE-2018-13870 CVE-2018-17432  +12 more Upstream summary: A SIGFPE signal is raised in the function H5D__create_chunk_file_map_hyper() of H5Dchunk.c in the […]

🟠 High   ⏱ 15–60 min  Last verified: 28 June 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:1357-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-37714 Upstream summary: jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML […]

🟡 Medium   ⏱ 10–30 min  Last verified: 24 June 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2020:787-1 Related CVEs: CVE-2019-10215 CVE-2021-29622 Upstream summary: Bootstrap-3-Typeahead after version 4.0.2 is vulnerable to a cross-site scripting flaw in the highlighter() function. An attacker could exploit this via user interaction to execute […]

🟠 High   ⏱ 15–60 min  Last verified: 22 June 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:10289 (see also SUSE bugzilla) Related CVEs: CVE-2021-33198 CVE-2021-33196 CVE-2021-27918 CVE-2021-31525 CVE-2021-33195 CVE-2021-33197 CVE-2021-34558 CVE-2021-36221 Upstream summary: In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a […]

🟡 Medium   ⏱ 10–30 min  Last verified: 13 June 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0983-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-36774 Upstream summary: plugins/gtk+/glade-gtk-box.c in GNOME Glade before 3.38.1 and 3.39.x before 3.40.0 mishandles widget rebuilding for GladeGtkBox, leading to a denial of service (application […]

🟠 High   ⏱ 15–60 min  Last verified: 9 June 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:3054-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-25654 CVE-2018-16877 CVE-2018-16878 CVE-2019-3885 Upstream summary: An ACL bypass flaw was found in pacemaker. An attacker having a local account on the cluster and in […]