SLES 16 — pkgconf — multiple vulnerabilities (2 CVEs) — patch and remediation guide
🔴 Critical ⏱ 15–90 min Last verified: 9 July 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2018-1000221 CVE-2023-24056 Upstream summary: pkgconf version 1.5.0 to 1.5.2 contains a Buffer Overflow vulnerability in dequote() that can result in dequote() function returns 1-byte allocation […]