SLES 16

🟡 Medium   ⏱ 10–30 min  Last verified: 10 July 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:0642-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-10916 Upstream summary: It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a […]

🟠 High   ⏱ 15–60 min  Last verified: 10 July 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2019-20478 Upstream summary: In ruamel.yaml through 0.16.7, the load method allows remote code execution if the application calls this method with an untrusted argument. In […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 July 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:744-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-14853 CVE-2019-14859 Upstream summary: An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unexpected exceptions (or […]

🔴 Critical   ⏱ 15–90 min  Last verified: 10 July 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:8726 (see also SUSE bugzilla) Related CVEs: CVE-2024-10458 CVE-2024-10459 CVE-2024-10460 CVE-2024-10461 CVE-2024-10462 CVE-2024-10463 CVE-2024-10464 CVE-2024-10465  +12 more Upstream summary: A permission leak could have occurred from a trusted site to an untrusted […]

🟠 High   ⏱ 15–60 min  Last verified: 10 July 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1712-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-40244 CVE-2026-40250 CVE-2026-34588 CVE-2026-34589 CVE-2026-27622 CVE-2025-12495 CVE-2025-12839 CVE-2025-12840  +12 more Upstream summary: OpenEXR provides the specification and reference implementation of the EXR file format, an […]

🟠 High   ⏱ 15–60 min  Last verified: 9 July 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:283-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-38185 CVE-2014-9112 CVE-2016-2037 CVE-2019-14866 CVE-2023-7207 CVE-2015-1197 Upstream summary: GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of […]

🔴 Critical   ⏱ 15–90 min  Last verified: 9 July 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2018-1000221 CVE-2023-24056 Upstream summary: pkgconf version 1.5.0 to 1.5.2 contains a Buffer Overflow vulnerability in dequote() that can result in dequote() function returns 1-byte allocation […]

🟡 Medium   ⏱ 10–30 min  Last verified: 8 July 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:0122-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-1246 CVE-2016-1251 CVE-2017-10788 CVE-2017-10789 CVE-2016-1249 Upstream summary: Buffer overflow in the DBD::mysql module before 4.037 for Perl allows context-dependent attackers to cause a denial of […]

🟠 High   ⏱ 15–60 min  Last verified: 7 July 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:1765-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-16301 CVE-2015-0261 CVE-2015-2153 CVE-2015-2154 CVE-2015-2155 CVE-2016-7922 CVE-2016-7923 CVE-2016-7924  +12 more Upstream summary: The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in […]