SLES 15

🔴 Critical   ⏱ 15–90 min  Last verified: 2 July 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:2738-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-46848 CVE-2024-12133 CVE-2018-6003 CVE-2025-13151 CVE-2014-3467 CVE-2014-3468 CVE-2014-3469 CVE-2015-2806  +3 more Upstream summary: GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 July 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1218-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-25645 CVE-2024-47081 Upstream summary: Requests is a HTTP library. Prior to version 2.33.0, the `requests.utils.extract_zipped_paths()` utility function uses a predictable filename when extracting files from […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 June 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1666-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-4539 Upstream summary: A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. […]

🟠 High   ⏱ 15–60 min  Last verified: 30 June 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:10135 (see also SUSE bugzilla) Related CVEs: CVE-2026-34986 Upstream summary: Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web […]

🟠 High   ⏱ 15–60 min  Last verified: 30 June 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1936-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-7111 Upstream summary: Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion […]

🟠 High   ⏱ 15–60 min  Last verified: 29 June 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:12176 (see also SUSE bugzilla) Related CVEs: CVE-2026-32597 Upstream summary: PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit (Critical) Header Parameter defined […]

🔴 Critical   ⏱ 15–90 min  Last verified: 29 June 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2014-3622 CVE-2025-1220 CVE-2025-1217 CVE-2025-1736 CVE-2023-3823 CVE-2023-3824 CVE-2023-0568 CVE-2023-0662  +12 more Upstream summary: Use-after-free vulnerability in the add_post_var function in the Posthandler component in PHP 5.6.x […]

🟡 Medium   ⏱ 10–30 min  Last verified: 27 June 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0199-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-66034 Upstream summary: fontTools is a library for manipulating fonts, written in Python. In versions from 4.33.0 to before 4.60.2, the fonttools varLib (or python3 […]

🟠 High   ⏱ 15–60 min  Last verified: 27 June 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:18028 (see also SUSE bugzilla) Related CVEs: CVE-2026-33416 CVE-2026-25646 CVE-2011-3026 CVE-2011-3045 CVE-2014-9495 CVE-2015-0973 CVE-2026-34757 CVE-2025-64505  +7 more Upstream summary: LIBPNG is a reference library for use in applications that read, create, and […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 June 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0220-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-22701 CVE-2025-68146 Upstream summary: filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock […]