SLES 16

🟡 Medium   ⏱ 10–30 min  Last verified: 16 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:4390-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-66453 Upstream summary: Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, when an application passed an […]

🟠 High   ⏱ 15–60 min  Last verified: 16 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:0800-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-13936 Upstream summary: An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same […]

🟠 High   ⏱ 15–60 min  Last verified: 16 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1498-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-4046 Upstream summary: The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs […]

🟠 High   ⏱ 15–60 min  Last verified: 16 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:9254 (see also SUSE bugzilla) Related CVEs: CVE-2026-22016 CVE-2026-34282 CVE-2026-21932 CVE-2026-21945 CVE-2025-53066 CVE-2022-21449 CVE-2022-21476 CVE-2022-34169  +12 more Upstream summary: Unknown. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

🟠 High   ⏱ 15–60 min  Last verified: 15 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2014:1212-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-6271 CVE-2014-6277 CVE-2014-6278 CVE-2014-7169 CVE-2014-7186 CVE-2014-7187 CVE-2016-9401 CVE-2014-2524 Upstream summary: GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment […]

🟠 High   ⏱ 15–60 min  Last verified: 15 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2019-12402 CVE-2021-35515 CVE-2021-35516 CVE-2021-35517 CVE-2021-36090 CVE-2024-25710 CVE-2024-26308 Upstream summary: The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get […]

🟠 High   ⏱ 15–60 min  Last verified: 14 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:0140-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-0486 CVE-2018-0489 CVE-2019-9628 Upstream summary: Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Provider before 2.6.0 on Windows and other products, mishandles digital signatures […]

🔴 Critical   ⏱ 15–90 min  Last verified: 14 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:1338-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-1996 CVE-2021-21272 CVE-2022-36055 CVE-2024-45337 CVE-2025-53547 CVE-2025-55199 CVE-2026-35206 CVE-2022-23524  +11 more Upstream summary: Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0. Table […]

🟠 High   ⏱ 15–60 min  Last verified: 14 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:0841-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-25255 CVE-2023-24607 CVE-2023-32763 CVE-2024-39936 CVE-2023-32762 CVE-2023-33285 CVE-2023-34410 CVE-2023-37369  +6 more Upstream summary: In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux […]

🔴 Critical   ⏱ 15–90 min  Last verified: 14 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2020:177-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-18218 CVE-2007-1536 CVE-2007-2799 CVE-2012-1571 CVE-2014-3710 CVE-2014-8116 CVE-2014-8117 CVE-2017-1000249  +5 more Upstream summary: cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of […]