SLES 16

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:19512 (see also SUSE bugzilla) Related CVEs: CVE-2025-61919 CVE-2025-55193 Upstream summary: Rack is a modular Ruby web server interface. Prior to versions 2.2.20, 3.1.18, and 3.2.3, `Rack::Request#POST` reads the entire request body […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2017-5226 CVE-2019-10063 CVE-2021-21261 CVE-2021-41133 CVE-2021-43860 CVE-2023-28100 CVE-2024-32462 CVE-2024-42472  +3 more Upstream summary: When executing a program via the bubblewrap sandbox, the nonpriv session can escape […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SA:2010:008 (see also SUSE bugzilla) Related CVEs: CVE-2010-0001 CVE-2009-2624 Upstream summary: Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SA:2009:003 (see also SUSE bugzilla) Related CVEs: CVE-2008-3831 Upstream summary: The i915 driver in (1) drivers/char/drm/i915_dma.c in the Linux kernel 2.6.24 on Debian GNU/Linux and (2) sys/dev/pci/drm/i915_drv.c in OpenBSD does not restrict […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:712-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-29599 Upstream summary: In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks. […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-13327 CVE-2025-62518 CVE-2025-54368 Upstream summary: A flaw was found in uv. This vulnerability allows an attacker to execute malicious code during package resolution or installation […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3823-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-41853 Upstream summary: Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb (HyperSQL DataBase) to process untrusted input may be vulnerable to a remote code execution attack. […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:03603-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-10230 CVE-2007-2446 CVE-2009-1886 CVE-2020-1472 CVE-2021-44142 CVE-2022-44640 CVE-2007-2447 CVE-2007-6015  +12 more Upstream summary: A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:2352-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-24882 CVE-2026-26955 CVE-2026-31806 CVE-2026-31883 CVE-2026-31885 CVE-2026-33984 CVE-2026-33986 CVE-2024-22211  +12 more Upstream summary: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:1534-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-13112 CVE-2019-9278 CVE-2020-0452 CVE-2020-13113 CVE-2007-6351 CVE-2007-6352 CVE-2012-2812 CVE-2012-2813  +12 more Upstream summary: An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF […]