SLES 16

🟠 High   ⏱ 15–60 min  Last verified: 13 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:1029-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-36843 Upstream summary: The implementation of EdDSA in EdDSA-Java (aka ed25519-java) through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA (Strong Existential Unforgeability […]

🟠 High   ⏱ 15–60 min  Last verified: 13 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0327-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-68156 CVE-2025-47913 CVE-2024-36129 CVE-2024-8975 CVE-2025-11065 CVE-2025-46327 CVE-2025-58058 Upstream summary: Expr is an expression language and expression evaluation for Go. Prior to version 1.17.7, several builtin […]

🟢 Low   ⏱ 5–15 min  Last verified: 12 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2019-10183 Upstream summary: Virt-install(1) utility used to provision new virtual machines has introduced an option '–unattended' to create VMs without user interaction. This option accepts […]

🟠 High   ⏱ 15–60 min  Last verified: 12 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:3066-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-11624 CVE-2017-11625 CVE-2017-11627 CVE-2017-9208 CVE-2017-9209 CVE-2017-9210 CVE-2017-11626 CVE-2017-12595 Upstream summary: A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause […]

🟠 High   ⏱ 15–60 min  Last verified: 12 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:1116-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-29136 CVE-2021-41190 Upstream summary: Open Container Initiative umoci before 0.4.7 allows attackers to overwrite arbitrary host paths via a crafted image that causes symlink traversal […]

🟡 Medium   ⏱ 10–30 min  Last verified: 11 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0742-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-51765 Upstream summary: sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with […]

🟠 High   ⏱ 15–60 min  Last verified: 10 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:2871-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-13089 CVE-2017-13090 CVE-2019-5953 CVE-2006-6719 CVE-2010-2252 CVE-2014-4877 CVE-2016-4971 CVE-2017-6508  +5 more Upstream summary: The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SA:2011:045 (see also SUSE bugzilla) Related CVEs: CVE-2006-7246 CVE-2015-2924 CVE-2018-1000135 CVE-2020-10754 CVE-2021-20297 CVE-2016-0764 Upstream summary: NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication is used. Table […]

🟠 High   ⏱ 15–60 min  Last verified: 10 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SA:2008:023 (see also SUSE bugzilla) Related CVEs: CVE-2007-4770 CVE-2020-10531 CVE-2025-5222 CVE-2008-1036 CVE-2020-21913 CVE-2007-4771 Upstream summary: libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexistent […]

🟠 High   ⏱ 15–60 min  Last verified: 9 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:14246-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-9512 CVE-2019-9514 CVE-2019-9515 CVE-2022-21712 CVE-2022-21716 CVE-2024-41671 CVE-2019-12387 CVE-2019-12855  +4 more Upstream summary: Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial […]