SLES

🟡 Medium   ⏱ 10–30 min  Last verified: 28 February 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:3944-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-13645 Upstream summary: In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to […]

🟠 High   ⏱ 15–60 min  Last verified: 23 February 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:2443-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3570 Upstream summary: A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between […]

🟠 High   ⏱ 15–60 min  Last verified: 22 February 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:3054-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-25654 CVE-2010-2496 CVE-2018-16877 CVE-2015-1867 CVE-2016-7035 CVE-2016-7797 CVE-2018-16878 CVE-2019-3885 Upstream summary: An ACL bypass flaw was found in pacemaker. An attacker having a local account on […]

🟠 High   ⏱ 15–60 min  Last verified: 20 February 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-IU-2022:1093-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-19203 CVE-2019-19204 CVE-2019-19246 CVE-2019-13225 CVE-2019-13224 CVE-2019-16163 CVE-2020-26159 Upstream summary: An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, […]

🟠 High   ⏱ 15–60 min  Last verified: 17 February 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:2591-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-3523 CVE-2021-2471 CVE-2020-2875 CVE-2020-2933 CVE-2020-2934 CVE-2015-2575 CVE-2017-3586 CVE-2017-3589 Upstream summary: Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are […]

🟠 High   ⏱ 15–60 min  Last verified: 15 February 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-FU-2022:0444-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-13132 CVE-2019-6250 CVE-2020-15166 CVE-2014-7202 CVE-2014-7203 CVE-2014-9721 Upstream summary: In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting […]

🟠 High   ⏱ 15–60 min  Last verified: 15 February 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:1886-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-43331 CVE-2021-43332 CVE-2021-44227 CVE-2021-42096 CVE-2019-3693 CVE-2020-12108 CVE-2020-12137 CVE-2020-15011  +6 more Upstream summary: In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options […]

🟠 High   ⏱ 15–60 min  Last verified: 12 February 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:0732-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-20044 CVE-2021-45444 CVE-2018-0502 CVE-2018-1100 CVE-2018-13259 CVE-2018-1083 CVE-2018-1071 Upstream summary: In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the –no-PRIVILEGED […]