SLES 15

🔴 Critical   ⏱ 15–90 min  Last verified: 3 February 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:1472 (see also SUSE bugzilla) Related CVEs: CVE-2025-15467 CVE-2021-3711 CVE-2026-28388 CVE-2026-31789 CVE-2025-9230 CVE-2024-12797 CVE-2024-9143 CVE-2024-41996  +12 more Upstream summary: Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters […]

🟡 Medium   ⏱ 10–30 min  Last verified: 2 February 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:0821-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-0633 CVE-2023-33461 Upstream summary: Heap-based Buffer Overflow vulnerability in iniparser_dumpsection_ini() in iniparser allows attacker to read out of bound memory Table of contents Symptom & […]

🟠 High   ⏱ 15–60 min  Last verified: 1 February 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0643-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-21892 CVE-2025-22150 CVE-2025-23085 CVE-2024-21538 CVE-2024-22020 CVE-2024-36138 CVE-2024-27980 Upstream summary: On Linux, Node.js ignores certain environment variables if those may have been set by an unprivileged […]

🟠 High   ⏱ 15–60 min  Last verified: 31 January 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3889-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-29457 CVE-2021-31292 CVE-2025-55304 CVE-2018-11531 CVE-2018-20097 CVE-2018-20098 CVE-2019-13109 CVE-2021-29473  +12 more Upstream summary: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and […]

🟠 High   ⏱ 15–60 min  Last verified: 31 January 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:1334 (see also SUSE bugzilla) Related CVEs: CVE-2026-0861 CVE-2025-4802 CVE-2024-33599 CVE-2024-33600 CVE-2024-2961 CVE-2023-6246 CVE-2023-6779 CVE-2023-6780  +12 more Upstream summary: Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 January 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:1671-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-9082 CVE-2017-7475 CVE-2017-9814 CVE-2025-50422 CVE-2019-6461 CVE-2019-6462 Upstream summary: Integer overflow in the write_png function in cairo 1.14.6 allows remote attackers to cause a denial of […]

🟠 High   ⏱ 15–60 min  Last verified: 28 January 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1498-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-4046 Upstream summary: The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs […]

🔴 Critical   ⏱ 15–90 min  Last verified: 27 January 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1673-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-25289 CVE-2026-42308 CVE-2026-42310 CVE-2021-25287 CVE-2021-25288 CVE-2021-28675 CVE-2021-28676 CVE-2021-28677  +12 more Upstream summary: An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer […]

🔴 Critical   ⏱ 15–90 min  Last verified: 27 January 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2023:0260-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-27586 CVE-2026-31899 CVE-2021-21236 Upstream summary: CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to version 2.7.0, Cairo can send requests […]