SLES 15

🟠 High   ⏱ 15–60 min  Last verified: 21 April 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:16484 (see also SUSE bugzilla) Related CVEs: CVE-2026-4150 CVE-2026-4153 CVE-2026-4154 CVE-2026-2044 CVE-2026-2045 CVE-2026-2048 CVE-2026-2271 CVE-2026-2272  +12 more Upstream summary: GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows […]

🔴 Critical   ⏱ 15–90 min  Last verified: 21 April 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:3807-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-5869 CVE-2018-1115 CVE-2018-16850 CVE-2026-6473 CVE-2026-6475 CVE-2026-6476 CVE-2026-6477 CVE-2026-6479  +12 more Upstream summary: A flaw was found in PostgreSQL that allows authenticated database users to execute […]

🔴 Critical   ⏱ 15–90 min  Last verified: 20 April 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2023:3956-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-15180 CVE-2026-32710 CVE-2025-13699 CVE-2021-46669 CVE-2022-27376 CVE-2022-27377 CVE-2022-27378 CVE-2022-27379  +12 more Upstream summary: A flaw was found in the mysql-wsrep component of mariadb. Lack of input […]

🟠 High   ⏱ 15–60 min  Last verified: 18 April 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:13515 (see also SUSE bugzilla) Related CVEs: CVE-2026-33554 Upstream summary: ipmi-oem in FreeIPMI before 1.16.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set […]

🟠 High   ⏱ 15–60 min  Last verified: 17 April 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0648-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-1837 CVE-2025-12474 Upstream summary: A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another […]

🔴 Critical   ⏱ 15–90 min  Last verified: 17 April 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:3911-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-9264 CVE-2023-3128 CVE-2021-41244 CVE-2026-21720 CVE-2026-21721 CVE-2025-6023 CVE-2025-64751 CVE-2024-45339  +12 more Upstream summary: The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` […]

🟠 High   ⏱ 15–60 min  Last verified: 15 April 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0800-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-28364 CVE-2017-9772 CVE-2018-9838 CVE-2015-8869 Upstream summary: In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution […]

🟠 High   ⏱ 15–60 min  Last verified: 14 April 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1396-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-67030 Upstream summary: Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code Table […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 April 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2026:1001-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-31812 CVE-2023-40030 Upstream summary: Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger […]