SLES 16

🟠 High   ⏱ 15–60 min  Last verified: 24 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1440-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-1135 Upstream summary: Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:20590-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-8746 Upstream summary: A vulnerability, which was classified as problematic, was found in GNU libopts up to 27.6. Affected is the function __strstr_sse2. The manipulation […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2024:1829-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-52323 Upstream summary: PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack. Table of contents Symptom & Impact […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2008-5008 Upstream summary: Buffer overflow in src/src_sinc.c in Secret Rabbit Code (aka SRC or libsamplerate) before 0.1.4, when "extreme low conversion ratios" are used, allows […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:3234-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-16853 CVE-2025-31335 Upstream summary: The DynamicMetadataProvider class in saml/saml2/metadata/impl/DynamicMetadataProvider.cpp in OpenSAML-C in OpenSAML before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and […]

🔴 Critical   ⏱ 15–90 min  Last verified: 22 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:7383 (see also SUSE bugzilla) Related CVEs: CVE-2026-4631 CVE-2026-26996 CVE-2026-25547 CVE-2025-13465 CVE-2024-6126 Upstream summary: Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:3027-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-36033 Upstream summary: jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety. jsoup may incorrectly sanitize HTML […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2017-7524 CVE-2021-3565 CVE-2024-29038 CVE-2024-29039 Upstream summary: tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:740-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-18074 CVE-2023-32681 CVE-2024-35195 CVE-2024-47081 CVE-2014-1829 CVE-2014-1830 Upstream summary: The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon […]