SLES

🟠 High   ⏱ 15–60 min  Last verified: 26 March 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3889-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-29457 CVE-2018-19535 CVE-2018-20097 CVE-2019-13112 CVE-2021-29473 CVE-2021-34334 CVE-2021-31291 CVE-2019-13110  +12 more Upstream summary: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 March 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:3944-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-13645 Upstream summary: In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to […]

🟠 High   ⏱ 15–60 min  Last verified: 20 March 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3016-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-39359 Upstream summary: In GNOME libgda through 6.0.0, gda-web-provider.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to […]

🟠 High   ⏱ 15–60 min  Last verified: 16 March 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:233-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-13987 CVE-2020-13988 CVE-2020-17437 CVE-2020-17438 Upstream summary: An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component […]

🟢 Low   ⏱ 5–15 min  Last verified: 13 March 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2021-36085 CVE-2021-36086 CVE-2021-36087 Upstream summary: The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __verify_map_perm_classperms and hashtab_map). Table of contents Symptom […]

🟠 High   ⏱ 15–60 min  Last verified: 13 March 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:712-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-33813 Upstream summary: An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 March 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:1029-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-12658 Upstream summary: gssproxy (aka gss-proxy) before 0.8.3 does not unlock cond_mutex before pthread exit in gp_worker_main() in gp_workers.c. NOTE: An upstream comment states "We […]

🟠 High   ⏱ 15–60 min  Last verified: 5 March 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3259-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-14001 Upstream summary: The kramdown gem before 2.3.0 for Ruby processes the template option inside Kramdown documents by default, which allows unintended read access (such […]

🟠 High   ⏱ 15–60 min  Last verified: 5 March 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3093-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-21241 CVE-2021-23385 Upstream summary: The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is a independently maintained […]

🟠 High   ⏱ 15–60 min  Last verified: 4 March 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2020:518-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-25219 CVE-2020-26154 CVE-2012-4504 Upstream summary: url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response […]