SLES

🟠 High   ⏱ 15–60 min  Last verified: 4 July 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:0906-1 Related CVEs: CVE-2020-28477 CVE-2020-26217 CVE-2020-26258 CVE-2020-26259 Upstream summary: This affects all versions of package immer. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟡 Medium   ⏱ 10–30 min  Last verified: 3 July 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:3452-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-20795 Upstream summary: iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 June 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:2109-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-14019 Upstream summary: Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used, and thus permissions are not preserved. […]

🟠 High   ⏱ 15–60 min  Last verified: 28 June 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:0414-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-3814 CVE-2017-14461 CVE-2019-11500 CVE-2020-10957 CVE-2020-12100 CVE-2020-12673 CVE-2020-12674 CVE-2020-24386  +12 more Upstream summary: It was discovered that Dovecot before versions 2.2.36.1 and 2.3.4.1 incorrectly handled client […]

🟠 High   ⏱ 15–60 min  Last verified: 23 June 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:1934-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-8903 CVE-2020-8907 CVE-2020-8933 Upstream summary: A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 June 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:3527-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-35357 Upstream summary: A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and […]

🟠 High   ⏱ 15–60 min  Last verified: 21 June 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2019:0143-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-6690 Upstream summary: python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 June 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:245-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-29651 Upstream summary: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers […]

🔴 Critical   ⏱ 15–90 min  Last verified: 17 June 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:2084-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-14354 CVE-2018-14360 CVE-2018-14361 CVE-2018-14351 CVE-2018-14357 CVE-2018-14363 CVE-2020-14093 CVE-2020-14154  +12 more Upstream summary: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They […]

🟠 High   ⏱ 15–60 min  Last verified: 13 June 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:0654-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-3816 CVE-2019-3833 Upstream summary: Openwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemon was […]