SLES 16

🟡 Medium   ⏱ 10–30 min  Last verified: 29 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-FU-2021:2130-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-5123 CVE-2014-8991 CVE-2015-2296 CVE-2019-20916 CVE-2023-5752 CVE-2026-1703 Upstream summary: The mirroring support (-M, –use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks […]

🟡 Medium   ⏱ 10–30 min  Last verified: 29 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1651-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-4317 Upstream summary: Missing authorization in PostgreSQL built-in views pg_stats_ext and pg_stats_ext_exprs allows an unprivileged database user to read most common values and other statistics […]

🟠 High   ⏱ 15–60 min  Last verified: 29 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1819-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-41205 CVE-2022-40023 Upstream summary: Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.get_template() is vulnerable to path traversal when a URI starts […]

🔴 Critical   ⏱ 15–90 min  Last verified: 29 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:3162-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-10933 CVE-2019-14889 CVE-2025-5372 CVE-2025-8114 CVE-2026-0964 CVE-2026-0966 CVE-2012-4559 CVE-2012-4560  +12 more Upstream summary: A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and […]

🟡 Medium   ⏱ 10–30 min  Last verified: 28 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2009:020 (see also SUSE bugzilla) Related CVEs: CVE-2009-3627 Upstream summary: The decode_entities function in util.c in HTML-Parser before 3.63 allows context-dependent attackers to cause a denial of service (infinite loop) via an […]

🟡 Medium   ⏱ 10–30 min  Last verified: 27 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2013:1103-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-2003 CVE-2017-16612 Upstream summary: Integer overflow in X.org libXcursor 1.1.13 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2017-16611 Upstream summary: In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read) files on the system as root, […]

🟠 High   ⏱ 15–60 min  Last verified: 26 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2025:14637-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-34749 CVE-2017-15612 CVE-2017-16876 Upstream summary: In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:3944-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-13645 Upstream summary: In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to […]

🟠 High   ⏱ 15–60 min  Last verified: 26 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:127-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-20305 CVE-2021-3580 CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 CVE-2016-6489 CVE-2018-16869 CVE-2023-36660 Upstream summary: A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification […]