SLES 15

🟡 Medium   ⏱ 10–30 min  Last verified: 22 November 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2025:02203-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-12224 CVE-2023-50711 CVE-2025-3416 Upstream summary: Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a […]

🟡 Medium   ⏱ 10–30 min  Last verified: 16 November 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:01731-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-22866 CVE-2024-45336 CVE-2024-45341 CVE-2024-34155 CVE-2024-34156 CVE-2024-34158 CVE-2024-24788 Upstream summary: Due to the usage of a variable time instruction in the assembly implementation of an internal […]

🟠 High   ⏱ 15–60 min  Last verified: 5 November 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:744-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-3689 CVE-2025-12801 Upstream summary: The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 […]

🔴 Critical   ⏱ 15–90 min  Last verified: 4 November 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:03237-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-6351 CVE-2023-6350 CVE-2025-48174 CVE-2025-48175 Upstream summary: Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap […]

🟡 Medium   ⏱ 10–30 min  Last verified: 31 October 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:3845-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-61962 CVE-2021-36386 CVE-2021-39272 CVE-2009-2666 CVE-2010-1167 CVE-2011-1947 CVE-2012-3482 Upstream summary: In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 October 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:03087-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-40918 Upstream summary: Authen::SASL::Perl::DIGEST_MD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely. The cnonce (client nonce) is generated from an MD5 hash of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 24 October 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2014:1017-1 (see also SUSE bugzilla) Related CVEs: CVE-2012-0786 CVE-2014-8119 CVE-2025-2588 CVE-2017-7555 Upstream summary: The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive […]

🟠 High   ⏱ 15–60 min  Last verified: 22 October 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:4597 (see also SUSE bugzilla) Related CVEs: CVE-2025-3891 CVE-2025-31492 CVE-2024-24814 CVE-2023-28625 CVE-2021-39191 CVE-2022-23527 CVE-2021-32785 CVE-2021-32786  +4 more Upstream summary: A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw […]

🔴 Critical   ⏱ 15–90 min  Last verified: 22 October 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:0228-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-19198 CVE-2018-19199 CVE-2018-20721 CVE-2018-19200 CVE-2024-34402 CVE-2024-34403 CVE-2025-67899 Upstream summary: An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an out-of-bounds write via a uriComposeQuery* […]