SLES 16

🟠 High   ⏱ 15–60 min  Last verified: 5 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:1054-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-2361 CVE-2008-2942 CVE-2015-7545 CVE-2016-3068 CVE-2016-3069 CVE-2016-3105 CVE-2016-3630 CVE-2017-1000116  +8 more Upstream summary: A vulnerability was found in Mercurial SCM 4.5.3/71.19.145.211. It has been declared as […]

🟠 High   ⏱ 15–60 min  Last verified: 5 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-IU-2021:741-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-12825 CVE-2010-4000 CVE-2017-8288 CVE-2019-3820 CVE-2023-43090 CVE-2024-36472 CVE-2020-17489 Upstream summary: libcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c, leading to stack consumption. Table of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 4 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:695-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-6318 Upstream summary: Stack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows local users to cause a denial of service (application crash) […]

🟡 Medium   ⏱ 10–30 min  Last verified: 2 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:1989-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-5824 CVE-2016-5827 CVE-2016-9584 Upstream summary: libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file. Table of contents […]

🟠 High   ⏱ 15–60 min  Last verified: 2 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:2211-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-7164 CVE-2019-7548 Upstream summary: SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter. Table of contents Symptom & Impact Environment […]

🟠 High   ⏱ 15–60 min  Last verified: 2 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3198-1 Related CVEs: CVE-2021-32610 Upstream summary: In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193. Table of contents Symptom & Impact Environment […]

🟠 High   ⏱ 15–60 min  Last verified: 2 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2020:173-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-2201 CVE-2020-17541 CVE-2014-9092 CVE-2017-15232 CVE-2018-1152 CVE-2018-11813 CVE-2018-19644 CVE-2020-13790  +4 more Upstream summary: In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due […]

🟠 High   ⏱ 15–60 min  Last verified: 2 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-FU-2026:20990-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-25727 CVE-2021-25900 CVE-2023-38633 CVE-2011-3146 CVE-2013-1881 CVE-2019-20446 CVE-2024-43806 CVE-2017-11464 Upstream summary: time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided […]

🟠 High   ⏱ 15–60 min  Last verified: 2 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-IU-2021:411-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-26720 CVE-2025-68276 CVE-2025-68468 CVE-2025-68471 CVE-2024-52615 CVE-2006-5461 CVE-2006-6870 CVE-2007-3372  +12 more Upstream summary: avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via […]

🔴 Critical   ⏱ 15–90 min  Last verified: 2 April 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:2706 (see also SUSE bugzilla) Related CVEs: CVE-2025-61732 CVE-2025-61731 CVE-2025-68119 CVE-2025-68121 CVE-2025-61727 CVE-2025-61729 CVE-2024-45340 CVE-2025-22865  +12 more Upstream summary: A discrepancy between how Go and C/C++ comments were parsed allowed for code […]