Approved changes feed: RSS · Atom

cpe:2.3:o:suse:linux_enterprise_desktop:15:sp1:*:*:*:*:*:*

part: o version: 15 update: sp1

VendorSuse (ec535637-432e-5a38-96dd-4ec1e0138f73)
ProductLinux Enterprise Desktop (def5e4d4-bdb7-5153-92ad-bf66499f9bbe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-31431 vulnerable 2026-06-08 07:57:14.912438 crypto: algif_aead - Revert to operating out-of-place
HIGH (7.8)
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.
Published: 2026-04-22T08:15:10.123Z
Updated: 2026-07-15T01:09:17.579Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8018 vulnerable 2026-06-08 05:27:14.669229 User owned /etc in SLES15-SP1-CHOST-BYOS
HIGH (8.4)
A Incorrect Default Permissions vulnerability in the SLES15-SP1-CHOST-BYOS and SLES15-SP1-CAP-Deployment-BYOS images of SUSE Linux Enterprise Server 15 SP1 allows local attackers with the UID 1000 to escalate to root due to a /etc directory owned by the user This issue affects: SUSE Linux Enterprise Server 15 SP1 SLES15-SP1-CAP-Deployment-BYOS version 1.0.1 and prior versions; SLES15-SP1-CHOST-BYOS versions prior to 1.0.3 and prior versions;
Published: 2020-05-04T11:35:12.257Z
Updated: 2024-09-16T20:47:16.896Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8017 not_vulnerable 2026-06-08 05:27:14.665698 race condition on texlive-filesystem cron job allows for the deletion of unintended files
MEDIUM (6.2)
A Race Condition Enabling Link Following vulnerability in the cron job shipped with texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows local users in group mktex to delete arbitrary files on the system This issue affects: SUSE Linux Enterprise Module for Desktop Applications 15-SP1 texlive-filesystem versions prior to 2017.135-9.5.1. SUSE Linux Enterprise Software Development Kit 12-SP4 texlive-filesystem versions prior to 2013.74-16.5.1. SUSE Linux Enterprise Software Development Kit 12-SP5 texlive-filesystem versions prior to 2013.74-16.5.1. openSUSE Leap 15.1 texlive-filesystem versions prior to 2017.135-lp151.8.3.1.
Published: 2020-04-02T14:05:18.643Z
Updated: 2024-09-17T01:50:50.369Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8016 not_vulnerable 2026-06-08 05:27:14.661356 race condition in the packaging of texlive-filesysten
MEDIUM (4.9)
A Race Condition Enabling Link Following vulnerability in the packaging of texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows local users to corrupt files or potentially escalate privileges. This issue affects: SUSE Linux Enterprise Module for Desktop Applications 15-SP1 texlive-filesystem versions prior to 2017.135-9.5.1. SUSE Linux Enterprise Software Development Kit 12-SP4 texlive-filesystem versions prior to 2013.74-16.5.1. SUSE Linux Enterprise Software Development Kit 12-SP5 texlive-filesystem versions prior to 2013.74-16.5.1. openSUSE Leap 15.1 texlive-filesystem versions prior to 2017.135-lp151.8.3.1.
Published: 2020-04-02T14:05:17.952Z
Updated: 2024-09-16T19:30:49.212Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.