🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1666-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-4539 Upstream summary: A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file […]
🟠 High ⏱ 15–60 min Last verified: 12 February 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:3744-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-6545 CVE-2025-6547 CVE-2024-48949 CVE-2018-15869 CVE-2024-48948 CVE-2020-26137 CVE-2025-5889 Upstream summary: Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation. This vulnerability is associated […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2026:2719 (see also SUSE bugzilla) Related CVEs: CVE-2026-24882 CVE-2025-68973 CVE-2025-30258 Upstream summary: In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed […]
🟠 High ⏱ 15–60 min Last verified: 12 February 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory Related CVEs: CVE-2020-0256 CVE-2021-0308 Upstream summary: In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of […]
🟠 High ⏱ 15–60 min Last verified: 12 February 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2019:2177-1 Related CVEs: CVE-2014-2905 CVE-2014-2906 CVE-2014-2914 CVE-2014-3219 CVE-2022-20001 CVE-2014-3856 CVE-2023-49284 Upstream summary: fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly check the credentials, which allows local users to gain privileges via […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2026:13641 (see also SUSE bugzilla) Related CVEs: CVE-2026-31958 CVE-2024-52804 Upstream summary: Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the only limit […]
🟠 High ⏱ 15–60 min Last verified: 12 February 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory RHSA-2026:12176 (see also SUSE bugzilla) Related CVEs: CVE-2026-32597 CVE-2022-29217 CVE-2024-53861 Upstream summary: PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit (Critical) Header […]
🔴 Critical ⏱ 15–90 min Last verified: 12 February 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2018-21029 CVE-2026-4105 CVE-2017-18078 CVE-2018-15688 CVE-2018-16864 CVE-2018-16865 CVE-2018-6954 CVE-2019-6454 +12 more Upstream summary: systemd 239 through 245 accepts any certificate signed by a trusted certificate authority […]
🔴 Critical ⏱ 15–90 min Last verified: 12 February 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2022-45299 Upstream summary: An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL. Table […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3257 Related CVEs: CVE-2026-5121 CVE-2025-5914 CVE-2019-18408 CVE-2025-5917 CVE-2021-31566 CVE-2017-14503 CVE-2018-1000877 CVE-2018-1000878 +3 more Upstream summary: A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in […]
